CVE-2007-3655
CVE-2007-3655 is a medium-severity vulnerability in Sun Jre with a CVSS 2.0 base score of 6.8. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-119.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.8)
- EPSS exploit prediction: 12% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-119
- Affected product: Sun Jre
- Published:
- Last modified:
Description
Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.
Frequently asked questions
- What is CVE-2007-3655?
- Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.
- How severe is CVE-2007-3655?
- CVE-2007-3655 has a CVSS 2.0 base score of 6.8, rated medium severity.
- Is CVE-2007-3655 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-3655?
- CVE-2007-3655 primarily affects Sun Jre. In total, 12 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-3655?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-3655 published?
- CVE-2007-3655 was published on 2007-07-10 and last updated on 2026-06-16.
References
- http://docs.info.apple.com/article.html?artnum=307177
- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064552.html
- http://osvdb.org/37756
- http://research.eeye.com/html/advisories/published/AD20070705.html
- http://secunia.com/advisories/25981
- http://secunia.com/advisories/26314
- http://secunia.com/advisories/26369
- http://secunia.com/advisories/27266
- http://secunia.com/advisories/28115
- http://secunia.com/advisories/29858
- http://secunia.com/advisories/30780
- http://security.gentoo.org/glsa/glsa-200804-28.xml
- http://securityreason.com/securityalert/2874
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102996-1
- http://www.exploit-db.com/exploits/30284
- http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml
- http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
- http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html
- http://www.redhat.com/support/errata/RHSA-2007-0818.html
- http://www.redhat.com/support/errata/RHSA-2007-0829.html
- http://www.securityfocus.com/archive/1/473224/100/0/threaded
- http://www.securityfocus.com/archive/1/473356/100/0/threaded
- http://www.securityfocus.com/bid/24832
- http://www.securitytracker.com/id?1018346
- http://www.vupen.com/english/advisories/2007/2477
- http://www.vupen.com/english/advisories/2007/4224
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35320
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11367
Affected products (12)
- cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
More vulnerabilities in Sun Jre
- CVE-2013-5824 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and…
- CVE-2013-5817 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…
- CVE-2013-5814 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…
- CVE-2013-5809 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…
- CVE-2013-5789 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and…
- CVE-2013-5787 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and…
Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities
- CVE-2026-2778 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in…
- CVE-2026-2776 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability…
- CVE-2025-1866 — Critical (CVSS 10.0): Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows…
- CVE-2022-27625 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
- CVE-2022-27624 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
- CVE-2020-11896 — Critical (CVSS 10.0): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.