CVE-2007-2906: Sun Java Embedding Plugin

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash) via a Thread subclass that calls super.run from its run method.

Affected products

• Sun Java Embedding Plugin: version 0.9.6.1 only

Published 2007-05-30. Last modified 2026-06-16.