PT-2006-6656 · Oracle · Java Runtime Environment+1

Published 2006-11-21 · Updated 2017-07-20 · CVE-2006-6009

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions 5.0 Update 7 and earlier

Description The issue allows attackers to obtain certain information via unknown attack vectors, related to an untrusted applet accessing data in other applets. This is due to an unspecified vulnerability in the Java Runtime Environment (JRE) Swing library.

Recommendations For Java Runtime Environment (JRE) versions 5.0 Update 7 and earlier, update to a version later than 5.0 Update 7 to resolve the issue.

Fix

Related Identifiers

CVE-2006-6009

Affected Products

Java Runtime Environment

Java Runtime Environment (Jre) Swing Library

References · 8

• http://secunia.com/advisories/22910 · Vendor Advisory
• http://securitytracker.com/id?1017229 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-6009 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30304 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6009 · Note
• http://securityfocus.com/bid/21077 · Note
• http://vupen.com/english/advisories/2006/4523 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102622-1 · Patch, Vendor Advisory