CVE-2007-2435

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.

• CWE-264

• http://dev2dev.bea.com/pub/advisory/241
• http://docs.info.apple.com/article.html?artnum=307177
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
• http://osvdb.org/35483
• http://secunia.com/advisories/25069Patch, Vendor Advisory
• http://secunia.com/advisories/25283
• http://secunia.com/advisories/25413
• http://secunia.com/advisories/25474
• http://secunia.com/advisories/25832
• http://secunia.com/advisories/26311
• http://secunia.com/advisories/26369
• http://secunia.com/advisories/28115
• http://secunia.com/advisories/29858
• http://secunia.com/advisories/30780
• http://security.gentoo.org/glsa/glsa-200706-08.xml
• http://security.gentoo.org/glsa/glsa-200804-28.xml
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102881-1Patch, Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2007-199.htm
• http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml
• http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml
• http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
• http://www.redhat.com/support/errata/RHSA-2007-0817.html
• http://www.redhat.com/support/errata/RHSA-2007-0829.html
• http://www.redhat.com/support/errata/RHSA-2008-0261.html
• http://www.securityfocus.com/bid/23728Patch
• http://www.securitytracker.com/id?1017986
• http://www.vupen.com/english/advisories/2007/1598
• http://www.vupen.com/english/advisories/2007/1814
• http://www.vupen.com/english/advisories/2007/4224
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33984
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10999
• http://dev2dev.bea.com/pub/advisory/241
• http://docs.info.apple.com/article.html?artnum=307177
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
• http://osvdb.org/35483
• http://secunia.com/advisories/25069Patch, Vendor Advisory
• http://secunia.com/advisories/25283
• http://secunia.com/advisories/25413
• http://secunia.com/advisories/25474
• http://secunia.com/advisories/25832
• http://secunia.com/advisories/26311
• http://secunia.com/advisories/26369
• http://secunia.com/advisories/28115
• http://secunia.com/advisories/29858
• http://secunia.com/advisories/30780
• http://security.gentoo.org/glsa/glsa-200706-08.xml
• http://security.gentoo.org/glsa/glsa-200804-28.xml
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102881-1Patch, Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2007-199.htm
• http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml
• http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml
• http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
• http://www.redhat.com/support/errata/RHSA-2007-0817.html
• http://www.redhat.com/support/errata/RHSA-2007-0829.html
• http://www.redhat.com/support/errata/RHSA-2008-0261.html
• http://www.securityfocus.com/bid/23728Patch
• http://www.securitytracker.com/id?1017986
• http://www.vupen.com/english/advisories/2007/1598
• http://www.vupen.com/english/advisories/2007/1814
• http://www.vupen.com/english/advisories/2007/4224
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33984
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10999

Published

May 2, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2429ManageEngine PasswordManager Pro (PMP) allows remote attacke…
• CVE-2007-2430shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows…
• CVE-2007-2431Dynamic variable evaluation vulnerability in shared/config/t…
• CVE-2007-2432Cross-site scripting (XSS) vulnerability in utilities/search…
• CVE-2007-2433Cross-site scripting (XSS) vulnerability in index.php in Ari…
• CVE-2007-2434Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 al…
• CVE-2007-2436Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-2437The X render (Xrender) extension in X.org X Window System 7.…
• CVE-2007-2438The sandbox for vim allows dangerous functions such as (1) w…
• CVE-2007-2439Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and e…
• CVE-2007-2440Directory traversal vulnerability in Caucho Resin Profession…
• CVE-2007-2441Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and e…