The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version of Windows is used, does not retrieve available new JRE versions, which allows remote attackers to leverage vulnerabilities in older releases of this software, aka Bug Id 6869694.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade java-1_5_0-sun-jdbcUpgrade java-1_5_0-sun-pluginUpgrade java-1_6_0-sunUpgrade java-1_5_0-sun-srcUpgrade java-1_6_0-sun-pluginUpgrade java-1_5_0-sun-develUpgrade java-1_6_0-sun-alsaUpgrade java-1_6_0-sun-srcUpgrade java-1_6_0-sun-demoUpgrade java-1_6_0-sun-develUpgrade java-1_6_0-sun-jdbcUpgrade java-1_5_0-sun-demoUpgrade java-1_5_0-sunUpgrade java-1_5_0-sun-alsa | Feb 17, 2015 | Nov 5, 2009 |
| Ubuntu | — | Upgrade sun-java6 | Nov 19, 2024 | Nov 5, 2009 |
| Vmsa 2010 0002 3 Java Jre Security Update | — | Upgrade VMware ESX 3.5 to build number 227413Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Nov 5, 2009 |
| Vmsa 2010 0005 | — | Apply ESX350-201003403-SG. | Feb 16, 2011 | Nov 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub