CVE-2006-0615

Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "second and third issues."

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2006-02-09

Last modified

2024-08-07

Affected products

• Jdk (Sun)
• Jre (Sun)
• Sdk (Sun)

References

• http://docs.info.apple.com/article.html?artnum=303658
• http://secunia.com/advisories/18760
• http://secunia.com/advisories/18884
• http://securitytracker.com/id?1015596
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1
• http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml
• http://www.kb.cert.org/vuls/id/759996
• http://www.vupen.com/english/advisories/2006/0467
• http://www.vupen.com/english/advisories/2006/0828
• http://www.vupen.com/english/advisories/2006/1398
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24561