Java Web Start (Sun) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2008-11-04. Vendor: Sun.

CVEs of Java Web Start

• CVE-2008-4910 - CVSS 10 (critical), 2008-11-04: The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the…
• CVE-2007-5019 - CVSS 10 (critical), 2007-09-20: Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a…
• CVE-2006-4302 - CVSS 5 (medium), 2006-08-23: The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to…
• CVE-2003-1229 - CVSS 7.5 (high), 2003-12-31: X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0…
• CVE-2002-2005 - CVSS 7.5 (high), 2002-12-31: Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via…