CVE-2009-2717

Sun Java SE 6 <Update 15 - Info Disclosure

Title source: llm

Description

The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet.

References (1)

[Vendor Advisory] http://java.sun.com/javase/6/webnotes/6u15.html

Scores

EPSS 0.0033

EPSS Percentile 55.2%

Classification

CWE

CWE-264

Status draft

Affected Products (1)

sun/java_se < 6

Timeline

Published Aug 10, 2009

Tracked Since Feb 18, 2026