CVE-2006-0617

Sun Java JDK/JRE <5.0.5 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "fifth, sixth, and seventh issues."

References (11)

Core 11
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0828
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015596
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0467
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18884
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24561
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18760
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/759996
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1398
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=303658
Patch, Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1

Scores

EPSS 0.0372
EPSS Percentile 88.1%

Details

Status published
Products (2)
sun/jdk < 1.5.0
sun/jre < 1.5.0
Published Feb 09, 2006
Tracked Since Feb 18, 2026