CVE-2007-3655: Sun JRE

Medium severity, CVSS 6.8. EPSS: 12.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.

Affected products

• Sun JRE: version 1.5.0 only; version 1.6.0 only

Published 2007-07-10. Last modified 2026-06-16.