CVE-2009-1106: Input Validation
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1106?
CVE-2009-1106 is classified as a medium severity vulnerability due to the potential for unauthorized access.
How do I fix CVE-2009-1106?
To fix CVE-2009-1106, upgrade to the latest version of the Java Runtime Environment or Java Development Kit.
What versions are affected by CVE-2009-1106?
CVE-2009-1106 affects Java SE Development Kit and Java Runtime Environment versions 6 Update 10, 11, and 12.
What is the impact of exploiting CVE-2009-1106?
Exploiting CVE-2009-1106 allows remote attackers to bypass access restrictions and connect to arbitrary sites.
Who can be impacted by CVE-2009-1106?
Users and organizations utilizing affected versions of the Java Runtime Environment or Development Kit are susceptible to CVE-2009-1106.