CVE-2007-2435

no score yetEPSS 5.0%

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.

EPSS: 5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2007-05-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:java_enterprise_system
sun:jre
sun:sdk

References

http://dev2dev.bea.com/pub/advisory/241
http://docs.info.apple.com/article.html?artnum=307177
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
http://osvdb.org/35483
http://secunia.com/advisories/25069

Check your stack JSON