Vulnerability Details CVE-2006-0617
Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "fifth, sixth, and seventh issues."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 87.3%
CVSS Severity
CVSS v2 Score 4.0
References
- http://docs.info.apple.com/article.html?artnum=303658
- http://secunia.com/advisories/18760
- http://secunia.com/advisories/18884
- http://securitytracker.com/id?1015596
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1
- http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml
- http://www.kb.cert.org/vuls/id/759996
- http://www.vupen.com/english/advisories/2006/0467
- http://www.vupen.com/english/advisories/2006/0828
- http://www.vupen.com/english/advisories/2006/1398
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24561
- http://docs.info.apple.com/article.html?artnum=303658
- http://secunia.com/advisories/18760
- http://secunia.com/advisories/18884
- http://securitytracker.com/id?1015596
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1
- http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml
- http://www.kb.cert.org/vuls/id/759996
- http://www.vupen.com/english/advisories/2006/0467
- http://www.vupen.com/english/advisories/2006/0828
- http://www.vupen.com/english/advisories/2006/1398
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24561
Products affected by CVE-2006-0617
-
cpe:2.3:a:sun:jdk:1.1.7b
-
cpe:2.3:a:sun:jdk:1.2.2
-
cpe:2.3:a:sun:jdk:1.5.0
-
cpe:2.3:a:sun:jre:1.3.0
-
cpe:2.3:a:sun:jre:1.4.2
-
cpe:2.3:a:sun:jre:1.5.0