9.3

CVE-2006-6745

Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ J2se Version 1.4 Edition sdk
Sun ≫ J2se Version 1.4.1 Edition sdk
Sun ≫ J2se Version 1.4.2 Edition sdk
Sun ≫ J2se Version 1.4.2_01 Edition sdk
Sun ≫ J2se Version 1.4.2_02 Edition sdk
Sun ≫ J2se Version 1.4.2_03 Edition sdk
Sun ≫ J2se Version 1.4.2_04 Edition sdk
Sun ≫ J2se Version 1.4.2_05 Edition sdk
Sun ≫ J2se Version 1.4.2_06 Edition sdk
Sun ≫ J2se Version 1.4.2_07 Edition sdk
Sun ≫ J2se Version 1.4.2_08
Sun ≫ J2se Version 1.4.2_09
Sun ≫ J2se Version 1.4.2_10
Sun ≫ J2se Version 1.4.2_11
Sun ≫ J2se Version 1.4.2_12
Sun ≫ J2se Version 5.0 Edition sdk
Sun ≫ J2se Version 5.0_update1 Edition sdk
Sun ≫ J2se Version 5.0_update2 Edition sdk
Sun ≫ J2se Version 5.0_update3
Sun ≫ J2se Version 5.0_update4
Sun ≫ J2se Version 5.0_update5
Sun ≫ J2se Version 5.0_update6
Sun ≫ J2se Version 5.0_update7
Sun ≫ Jre Version 1.4.1
Sun ≫ Jre Version 1.4.2
Sun ≫ Jre Version 1.4.2_1
Sun ≫ Jre Version 1.4.2_2
Sun ≫ Jre Version 1.4.2_3
Sun ≫ Jre Version 1.4.2_4
Sun ≫ Jre Version 1.4.2_5
Sun ≫ Jre Version 1.4.2_6
Sun ≫ Jre Version 1.4.2_7
Sun ≫ Jre Version 1.4.2_8
Sun ≫ Jre Version 1.4.2_9
Sun ≫ Jre Version 1.4.2_10
Sun ≫ Jre Version 1.4.2_11
Sun ≫ Jre Version 1.4.2_12
Sun ≫ Jre Version 1.4.2_13
Sun ≫ Jre Version 1.5.0
Sun ≫ Jre Version 1.5.0 Update update1
Sun ≫ Jre Version 1.5.0 Update update2
Sun ≫ Jre Version 1.5.0 Update update3
Sun ≫ Jre Version 1.5.0 Update update4
Sun ≫ Jre Version 1.5.0 Update update5
Sun ≫ Jre Version 1.5.0 Update update6
Sun ≫ Jre Version 1.5.0 Update update7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.16% 0.866
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://docs.info.apple.com/article.html?artnum=307177
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
http://secunia.com/advisories/24099
http://secunia.com/advisories/28115
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html
http://www.redhat.com/support/errata/RHSA-2007-0062.html
http://www.redhat.com/support/errata/RHSA-2007-0073.html
http://www.vupen.com/english/advisories/2007/4224
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html
http://secunia.com/advisories/23445
http://secunia.com/advisories/23650
http://secunia.com/advisories/23835
http://secunia.com/advisories/24189
http://secunia.com/advisories/24468
http://secunia.com/advisories/25283
http://secunia.com/advisories/25404
http://security.gentoo.org/glsa/glsa-200701-15.xml
http://security.gentoo.org/glsa/glsa-200702-08.xml
http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml
http://www.us-cert.gov/cas/techalerts/TA07-022A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/0936
http://www.vupen.com/english/advisories/2007/1814
http://secunia.com/advisories/26049
http://secunia.com/advisories/26119
http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
http://www.novell.com/linux/security/advisories/2007_45_java.html
http://dev2dev.bea.com/pub/advisory/240
http://securitytracker.com/id?1017426
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1
Vendor Advisory
http://www.kb.cert.org/vuls/id/102289
US Government Resource
http://www.securityfocus.com/bid/21673
http://www.vupen.com/english/advisories/2006/5074
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9621