The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-java/sun-jre-bin.Upgrade dev-java/blackdown-jdk.Upgrade dev-java/blackdown-jre.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jdk. | Oct 30, 2017 | Aug 10, 2009 |
| Ubuntu | — | Upgrade sun-java6 | Nov 19, 2024 | Aug 10, 2009 |
| Vmsa 2009 0016 5 Jre Security Update | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 10, 2009 |
| Vmsa 2010 0002 3 Java Jre Security Update | — | Upgrade VMware ESX 3.5 to build number 227413Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Aug 10, 2009 |
| Vmsa 2010 0005 | — | Apply ESX350-201003403-SG. | Feb 16, 2011 | Aug 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub