CVE-2007-0243

Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

11.62% chance of exploitation in the next 30 days, 96th percentile

Published

2007-01-17

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/457638/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3168

Security advisories

• http://www.zerodayinitiative.com/advisories/ZDI-07-005.html
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1
• http://www.kb.cert.org/vuls/id/388289
• http://www.redhat.com/support/errata/RHSA-2007-0166.html
• http://www.redhat.com/support/errata/RHSA-2007-0167.html
• http://www.redhat.com/support/errata/RHSA-2007-0956.html
• http://www.redhat.com/support/errata/RHSA-2008-0261.html
• http://www.securityfocus.com/bid/22085

References

• CVE Record
• NVD entry