CVE-2007-5019

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.

Affected products

Java Runtime Environment, Java Web Start

Sun Java Web Start

All versions

Sun Jre

= 1.6.0_0, 1.6.0_10

Sun Sdk

= 1.3.0

Fix

Available

CVSS 2.0

10.0 HIGH

EPSS

10.5% (95th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2007-09-20