CVE-2007-5019: Sun Java Web Start

High severity, CVSS 10.0. EPSS: 10.5% chance of exploitation in the next 30 days.

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.

Affected products

• Sun Java Web Start: any version
• Sun JRE: version 1.6.0_0 only; version 1.6.0_10 only
• Sun SDK: version 1.3.0 only

Published 2007-09-20. Last modified 2026-06-16.