CVE-2006-6737: Medium severity sun jdk vulnerability

Published Dec 26, 2006

Updated

Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The first issue."

Affected Software

72 affected components

Java Development Kit (JDK)=1.5.0

Java Development Kit (JDK)=1.5.0-update1

Java Development Kit (JDK)=1.5.0-update2

Java Development Kit (JDK)=1.5.0-update3

Java Development Kit (JDK)=1.5.0-update4

Java Development Kit (JDK)=1.5.0-update5

Sun Java Runtime Environment (JRE)=1.3.1

Sun Java Runtime Environment (JRE)=1.3.1_2

Sun Java Runtime Environment (JRE)=1.3.1_03

Sun Java Runtime Environment (JRE)=1.3.1_04

Sun Java Runtime Environment (JRE)=1.3.1_05

Sun Java Runtime Environment (JRE)=1.3.1_06

Sun Java Runtime Environment (JRE)=1.3.1_07

Sun Java Runtime Environment (JRE)=1.3.1_08

Sun Java Runtime Environment (JRE)=1.3.1_09

Sun Java Runtime Environment (JRE)=1.3.1_10

Sun Java Runtime Environment (JRE)=1.3.1_11

Sun Java Runtime Environment (JRE)=1.3.1_12

Sun Java Runtime Environment (JRE)=1.3.1_13

Sun Java Runtime Environment (JRE)=1.3.1_14

Sun Java Runtime Environment (JRE)=1.3.1_15

Sun Java Runtime Environment (JRE)=1.3.1_16

Sun Java Runtime Environment (JRE)=1.3.1_17

Sun Java Runtime Environment (JRE)=1.3.1_18

Sun Java Runtime Environment (JRE)=1.4.2

Sun Java Runtime Environment (JRE)=1.4.2_1

Sun Java Runtime Environment (JRE)=1.4.2_2

Sun Java Runtime Environment (JRE)=1.4.2_3

Sun Java Runtime Environment (JRE)=1.4.2_4

Sun Java Runtime Environment (JRE)=1.4.2_5

Sun Java Runtime Environment (JRE)=1.4.2_6

Sun Java Runtime Environment (JRE)=1.4.2_7

Sun Java Runtime Environment (JRE)=1.4.2_8

Sun Java Runtime Environment (JRE)=1.4.2_9

Sun Java Runtime Environment (JRE)=1.4.2_10

Sun Java Runtime Environment (JRE)=1.5.0

Sun Java Runtime Environment (JRE)=1.5.0-update1

Sun Java Runtime Environment (JRE)=1.5.0-update2

Sun Java Runtime Environment (JRE)=1.5.0-update3

Sun Java Runtime Environment (JRE)=1.5.0-update4

Sun Java Runtime Environment (JRE)=1.5.0-update5

Sun SDK=1.3.1

Sun SDK=1.3.1_01

Sun SDK=1.3.1_01a

Sun SDK=1.3.1_02

Sun SDK=1.3.1_03

Sun SDK=1.3.1_04

Sun SDK=1.3.1_05

Sun SDK=1.3.1_06

Sun SDK=1.3.1_07

Sun SDK=1.3.1_08

Sun SDK=1.3.1_09

Sun SDK=1.3.1_10

Sun SDK=1.3.1_11

Sun SDK=1.3.1_12

Sun SDK=1.3.1_13

Sun SDK=1.3.1_14

Sun SDK=1.3.1_15

Sun SDK=1.3.1_16

Sun SDK=1.3.1_17

Sun SDK=1.3.1_18

Sun SDK=1.4.2

Sun SDK=1.4.2_1

Sun SDK=1.4.2_2

Sun SDK=1.4.2_3

Sun SDK=1.4.2_4

Sun SDK=1.4.2_5

Sun SDK=1.4.2_6

Sun SDK=1.4.2_7

Sun SDK=1.4.2_8

Sun SDK=1.4.2_9

Sun SDK=1.4.2_10

Remediation

Patch Available

http://www.securityfocus.com/bid/21674

Event History

Dec 26, 2006

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Data Sourced

via NVD·11:28 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-6737?

CVE-2006-6737 is classified as a high severity vulnerability that allows attackers to access sensitive data through untrusted applets.

How do I fix CVE-2006-6737?

To fix CVE-2006-6737, upgrade to the latest version of the Sun Java Development Kit (JDK) or Java Runtime Environment (JRE) that is not affected by this vulnerability.

Which versions of Java are affected by CVE-2006-6737?

CVE-2006-6737 affects Sun JDK and JRE versions 5.0 Update 5 and earlier, and JRE versions 1.4.2_10 and earlier 1.4.x versions, as well as SDK and JRE versions 1.3.1_18 and earlier.

What type of attack does CVE-2006-6737 allow?

CVE-2006-6737 allows attackers to exploit untrusted applets to gain unauthorized access to data.

Is there a patch available for CVE-2006-6737?

Yes, there is a patch available through updates of the affected Java versions, so it's essential to keep your Java installation up to date.