What’s Vulnerable › Vulnerabilities

CVE-2007-5689

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-10-29 · updated 2026-06-16

Description

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.

Affected products

• Sun Jdk: through 1.6.0; 1.5.0-update1, 1.5.0-update10, 1.5.0-update11, 1.5.0-update12, 1.5.0-update2, 1.5.0-update3 (+6)
• Sun Jre: through 1.3.1; through 1.4.2; through 1.5.0; 1.3.0, 1.3.0-update5, 1.3.1-update1, 1.3.1-update16, 1.3.1-update18, 1.3.1-update19 (+26)
• Sun Sdk: through 1.4.2_15; 1.3.1_01, 1.3.1_01a, 1.3.1_16, 1.3.1_18, 1.3.1_19, 1.3.1_20 (+9)

References

• http://dev2dev.bea.com/pub/advisory/272
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
• http://osvdb.org/40834
• http://secunia.com/advisories/27320
• http://secunia.com/advisories/27693
• http://secunia.com/advisories/29042
• http://secunia.com/advisories/29858
• http://secunia.com/advisories/30676
• http://secunia.com/advisories/30780
• http://security.gentoo.org/glsa/glsa-200804-28.xml
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103112-1
• http://support.avaya.com/elmodocs2/security/ASA-2007-480.htm

Get alerted when CVE-2007-5689 or the next vulnerability affects your stack