Unscored severity · published Dec 26, 2006
CVE-2006-6745
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
J2
J2se · Sun
1.4; 1.4.1; 1.4.2; 1.4.2_01; 1.4.2_02; 1.4.2_03; +17 more · source: NVD
JR
Jre · Sun
1.4.1; 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; +17 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6745
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6745
dev2dev.bea.com
http://dev2dev.bea.com/pub/advisory/240
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=307177
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579
lists.apple.com
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
lists.suse.com
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html
secunia.com
http://secunia.com/advisories/23445
More from J2se
–
CVE-2006-4302
The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by…
–
CVE-2006-0613
Unspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain privileges via unspecified vectors…
–
CVE-2005-1974
Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1)…
–
CVE-2005-1973
Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges
–
CVE-2005-0418
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a…