CVE-2007-3503

Publication date 30 June 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Status

Package Ubuntu Release Status
sun-java5 9.10 karmic Not in release
9.04 jaunty
Fixed 1.5.0-13-0ubuntu1
8.10 intrepid
Fixed 1.5.0-13-0ubuntu1
8.04 LTS hardy
Fixed 1.5.0-13-0ubuntu1
7.10 gutsy
Fixed 1.5.0-13-0ubuntu1
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life
sun-java6 9.10 karmic
Fixed 6-02-1ubuntu1
9.04 jaunty
Fixed 6-02-1ubuntu1
8.10 intrepid
Fixed 6-02-1ubuntu1
8.04 LTS hardy
Fixed 6-02-1ubuntu1
7.10 gutsy
Fixed 6-02-1ubuntu1
7.04 feisty Ignored end of life, was needed
6.10 edgy Not in release
6.06 LTS dapper Not in release

References

Other references

Access our resources on patching vulnerabilities