Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:*:update10:*:*:*:*:*:*

part: a version: * update: update10

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2435 vulnerable 2026-06-08 04:49:44.879718 Details available
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.
Published: 2007-05-02T10:00:00.000Z
Updated: 2024-08-07T13:42:33.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0012 vulnerable 2026-06-08 04:49:31.119194 Details available
Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name attribute, which triggers a NULL pointer dereference in jpiexp32.dll when the applet is decoded and passed to the JVM.
Published: 2008-01-09T23:00:00.000Z
Updated: 2024-08-07T12:03:37.016Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.