Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
2009-11-09T19:30:00.500
2025-04-09T00:30:58.490
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | sun | jre | ≤ 1.5.0 | Yes |
Application | sun | jre | ≤ 1.6.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.5.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | jre | 1.6.0 | Yes |
Application | sun | openjdk | * | Yes |