CVE-2006-6745

Published: Dec 26, 2006Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.

Affected (46)

Products: Sun: J2se, Jre

Sun

2 products

J2se

Jre

Configuration A

46 vulnerable

Vulnerable Software	Affected Versions
Sun J2se	Version 1.4.1
Sun J2se	Version 1.4.2
Sun J2se	Version 1.4.2_01
Sun J2se	Version 1.4.2_02
Sun J2se	Version 1.4.2_03
Sun J2se	Version 1.4.2_04
Sun J2se	Version 1.4.2_05
Sun J2se	Version 1.4.2_06
Sun J2se	Version 1.4.2_07
Sun J2se	Version 1.4.2_08
Sun J2se	Version 1.4.2_09
Sun J2se	Version 1.4.2_10
Sun J2se	Version 1.4.2_11
Sun J2se	Version 1.4.2_12
Sun J2se	Version 1.4
Sun J2se	Version 5.0
Sun J2se	Version 5.0_update1
Sun J2se	Version 5.0_update2
Sun J2se	Version 5.0_update3
Sun J2se	Version 5.0_update4
Sun J2se	Version 5.0_update5
Sun J2se	Version 5.0_update6
Sun J2se	Version 5.0_update7
Sun Jre	Version 1.4.1
Sun Jre	Version 1.4.2
Sun Jre	Version 1.4.2_10
Sun Jre	Version 1.4.2_11
Sun Jre	Version 1.4.2_12
Sun Jre	Version 1.4.2_13
Sun Jre	Version 1.4.2_1
Sun Jre	Version 1.4.2_2
Sun Jre	Version 1.4.2_3
Sun Jre	Version 1.4.2_4
Sun Jre	Version 1.4.2_5
Sun Jre	Version 1.4.2_6
Sun Jre	Version 1.4.2_7
Sun Jre	Version 1.4.2_8
Sun Jre	Version 1.4.2_9
Sun Jre	Version 1.5.0
Sun Jre	Version 1.5.0 update1
Sun Jre	Version 1.5.0 update2
Sun Jre	Version 1.5.0 update3
Sun Jre	Version 1.5.0 update4
Sun Jre	Version 1.5.0 update5
Sun Jre	Version 1.5.0 update6
Sun Jre	Version 1.5.0 update7

References (70)

http://dev2dev.bea.com/pub/advisory/240

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307177

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579

Source: cve@mitre.org

http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html

Source: cve@mitre.org

http://secunia.com/advisories/23445

Source: cve@mitre.org

http://secunia.com/advisories/23650

Source: cve@mitre.org

http://secunia.com/advisories/23835

Source: cve@mitre.org

http://secunia.com/advisories/24099

Source: cve@mitre.org

http://secunia.com/advisories/24189

Source: cve@mitre.org

http://secunia.com/advisories/24468

Source: cve@mitre.org

http://secunia.com/advisories/25283

Source: cve@mitre.org

http://secunia.com/advisories/25404

Source: cve@mitre.org

http://secunia.com/advisories/26049

Source: cve@mitre.org

http://secunia.com/advisories/26119

Source: cve@mitre.org

http://secunia.com/advisories/28115

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200701-15.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200702-08.xml

Source: cve@mitre.org

http://securitytracker.com/id?1017426

Source: cve@mitre.org

PatchVendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1

Source: cve@mitre.org

Vendor Advisory

http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html

Source: cve@mitre.org

http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/102289

Source: cve@mitre.org

US Government Resource

http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_45_java.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0062.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0073.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/21673

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-022A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/5074

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0936

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1814

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4224

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9621

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/240