CVE-2007-0014 Security feature bypass in n/a
Attackers can bypass ChainKey Java Code Protection to decompile class files by using a modified class loader, exposing proprietary source code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-0014?
CVE-2007-0014 is a medium-severity vulnerability in n/a, published on 17 Jan 2007.
Official description
ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM.
Weakness: CWE-310
Which versions are affected by CVE-2007-0014?
It affects 1 product.
Products include Sun Chainkey Java Code Protection.
How do I fix CVE-2007-0014?
No fix has been published for CVE-2007-0014 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-0014 being exploited?
There is no known exploitation of CVE-2007-0014 in the wild and no public exploit code.
Sources
Also known as GHSA-3fh8-vxv8-v699.