Overview
A vulnerability in the Sun Java Runtime Environment may allow a malicious applet to gain elevated privileges.
Description
The Sun Java Runtime Environment (JRE) allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for multiple operating systems. Per Sunsolve Document ID 102731: |
Impact
An attacker may be able to run a Java applet on a vulnerable system with elevated privileges. |
Solution
Upgrade |
Disable Java |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
- http://secunia.com/advisories/23445/
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1
- http://secunia.com/advisories/23803/
- http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/jcp.html#update
- http://secunia.com/advisories/23835/
- http://www.securityfocus.com/bid/21673
- http://secunia.com/advisories/24189/
- http://secunia.com/advisories/24468/
- http://secunia.com/advisories/25283/
Acknowledgements
Sun thanks Tom Hawtin for reporting this vulnerability.
This document was written by Ryan Giobbi.
Other Information
| CVE IDs: | CVE-2006-6745 |
| Severity Metric: | 29.24 |
| Date Public: | 2006-12-20 |
| Date First Published: | 2007-01-09 |
| Date Last Updated: | 2007-05-16 18:58 UTC |
| Document Revision: | 44 |