CVE-2007-3922

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applets outbound connections by connecting to certain localhost services running on the machine that loaded the applet.

Risk Information

Base Score

7.4

MODERATE

Vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS Score

Exploitation Probability

3.98

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Java jdk (x64) 6.0(x64)	Windows
Multiple vulnerabilities affected in Java jdk 6.0	Windows
Multiple vulnerabilities affected in Java jre (x64) 6.0(x64)	Windows
Multiple vulnerabilities affected in Java jre 6.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234