Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jdk.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/blackdown-jdk.Upgrade dev-java/blackdown-jre. | Oct 30, 2017 | Aug 10, 2009 |
| Ubuntu | — | Upgrade sun-java6 | Nov 19, 2024 | Aug 10, 2009 |
| Vmsa 2009 0016 5 Jre Security Update | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 10, 2009 |
| Vmsa 2010 0002 3 Java Jre Security Update | — | Upgrade VMware ESX 3.5 to build number 227413Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Aug 10, 2009 |
| Vmsa 2010 0005 | — | Apply ESX350-201003403-SG. | Feb 16, 2011 | Aug 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub