Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*

part: a version: * update: update_6

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3115 vulnerable 2026-06-08 04:50:33.171822 Details available
Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases.
Published: 2008-07-09T23:00:00.000Z
Updated: 2024-08-07T09:28:41.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3114 vulnerable 2026-06-08 04:50:33.169945 Details available
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR 6704074.
Published: 2008-07-09T23:00:00.000Z
Updated: 2024-08-07T09:28:41.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3112 vulnerable 2026-06-08 04:50:33.165392 Details available
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
Published: 2008-07-09T23:00:00.000Z
Updated: 2024-08-07T09:28:41.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3110 vulnerable 2026-06-08 04:50:33.151977 Details available
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet.
Published: 2008-07-09T23:00:00.000Z
Updated: 2024-08-07T09:28:40.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3109 vulnerable 2026-06-08 04:50:33.151149 Details available
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Published: 2008-07-09T23:00:00.000Z
Updated: 2024-08-07T09:28:41.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3107 vulnerable 2026-06-08 04:50:33.107200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3106 vulnerable 2026-06-08 04:50:33.098485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3105 vulnerable 2026-06-08 04:50:33.097111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3103 vulnerable 2026-06-08 04:50:33.041736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.