Description
The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://java.sun.com/javase/6/webnotes/6u15.html
Scores
EPSS
0.0033
EPSS Percentile
55.7%
Details
CWE
CWE-264
Status
published
Products (1)
sun/java_se
< 6
Published
Aug 10, 2009
Tracked Since
Feb 18, 2026