Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*

part: a version: 6 update: update_6

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJdk (86ca1592-c9ed-54c6-9315-e1ffda84ce5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2675 vulnerable 2026-06-08 04:51:29.873266 Details available
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:57.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2674 vulnerable 2026-06-08 04:51:29.871520 Details available
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2673 vulnerable 2026-06-08 04:51:29.853088 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2672 vulnerable 2026-06-08 04:51:29.851061 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2671 vulnerable 2026-06-08 04:51:29.848988 Details available
The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2670 vulnerable 2026-06-08 04:51:29.824973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5358 vulnerable 2026-06-08 04:50:51.087572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5356 vulnerable 2026-06-08 04:50:51.074137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5355 vulnerable 2026-06-08 04:50:51.069957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5354 vulnerable 2026-06-08 04:50:51.066710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5353 vulnerable 2026-06-08 04:50:51.062746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5352 vulnerable 2026-06-08 04:50:51.060243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5351 vulnerable 2026-06-08 04:50:51.057622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5350 vulnerable 2026-06-08 04:50:51.054711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5349 vulnerable 2026-06-08 04:50:51.052855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5348 vulnerable 2026-06-08 04:50:51.050428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5347 vulnerable 2026-06-08 04:50:51.048636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5344 vulnerable 2026-06-08 04:50:50.916606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5343 vulnerable 2026-06-08 04:50:50.913797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5342 vulnerable 2026-06-08 04:50:50.911176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5341 vulnerable 2026-06-08 04:50:50.908441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5340 vulnerable 2026-06-08 04:50:50.905747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5339 vulnerable 2026-06-08 04:50:50.870495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2086 vulnerable 2026-06-08 04:50:22.883374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.