PublicDate: 2007-10-06 00:17:00 UTC Candidate: CVE-2007-5236 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5236 Description: Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: upstream_sun-java5: released (5.0 Update 13) dapper_sun-java5: ignored (reached end-of-life) edgy_sun-java5: needed (reached end-of-life) feisty_sun-java5: needed (reached end-of-life) gutsy_sun-java5: released (1.5.0-13-0ubuntu1) hardy_sun-java5: released (1.5.0-13-0ubuntu1) intrepid_sun-java5: released (1.5.0-13-0ubuntu1) jaunty_sun-java5: released (1.5.0-13-0ubuntu1) karmic_sun-java5: DNE devel_sun-java5: DNE