PT-2006-1670 · Oracle · J2Se+1

Published 2006-02-09 · Updated 2017-07-20 · CVE-2006-0613

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java Web Start versions after 1.0.1 02 J2SE 5.0 Update 5 and earlier

Description The issue allows remote attackers to obtain privileges via unspecified vectors involving untrusted applications.

Recommendations For Java Web Start versions after 1.0.1 02, update to a version prior to or equal to 1.0.1 02 to resolve the issue. For J2SE 5.0 Update 5 and earlier, update to a version later than 5.0 Update 5 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0613

Affected Products

J2Se

Java Web Start

References · 10

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102170-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0613 · Security Note
• http://secunia.com/advisories/18762 · Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=303658 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24568 · Note
• http://vupen.com/english/advisories/2006/0468 · Note
• http://securitytracker.com/id?1015597 · Note
• http://kb.cert.org/vuls/id/652636 · Note
• http://vupen.com/english/advisories/2006/1398 · Note
• http://securityfocus.com/bid/16540 · Note