CVE-2007-4381: Sun JDK

High severity, CVSS 9.3. EPSS: 5.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

Affected products

• Sun JDK: up to and including 1.5.0
• Sun JRE: up to and including 1.4.2
• Sun SDK: up to and including 1.4.2_14

Published 2007-08-17. Last modified 2026-06-16.