PT-2006-7338 · Sun · Jdk+2

Tom Hawtin · Published 2006-12-26 · Updated 2019-08-01 · CVE-2006-6737

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 5 and earlier Sun Java System Development Kit (SDK) and JRE versions 1.4.2 10 and earlier 1.4.x Sun Java SDK and JRE versions 1.3.1 18 and earlier

Description: The issue allows attackers to use untrusted applets to access data in other applets.

Recommendations: For Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 5 and earlier, update to a version later than 5.0 Update 5. For Sun Java System Development Kit (SDK) and JRE versions 1.4.2 10 and earlier 1.4.x, update to a version later than 1.4.2 10. For Sun Java SDK and JRE versions 1.3.1 18 and earlier, update to a version later than 1.3.1 18.

Fix

Related Identifiers

CVE-2006-6737

RHSA-2007:0062

RHSA-2007:0072

RHSA-2007:0073

Affected Products

Jdk

Jre

Java Sdk

References · 26

• http://security.gentoo.org/glsa/glsa-200702-08.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_10_ibmjava.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0062.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200705-20.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0072.html · Vendor Advisory
• http://securityfocus.com/bid/21674 · Patch
• http://novell.com/linux/security/advisories/2007_45_java.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6737 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0073.html · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200701-15.xml · Vendor Advisory
• http://secunia.com/advisories/24099 · Note
• http://vupen.com/english/advisories/2006/5075 · Note
• http://securitytracker.com/id?1017427 · Note