CVE-2006-6009

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-21 · updated 2026-06-16

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) Swing library in JDK and JRE 5.0 Update 7 and earlier allows attackers to obtain certain information via unknown attack vectors, related to an untrusted applet accessing data in other applets.

Affected products

Sun Jdk: through 1.5.0; 1.5.0-update3, 1.5.0-update4, 1.5.0-update5
Sun Jre: through 1.5.0; 1.5.0-update3, 1.5.0-update4, 1.5.0-update5

References

http://secunia.com/advisories/22910
http://securitytracker.com/id?1017229
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102622-1
http://www.securityfocus.com/bid/21077
http://www.vupen.com/english/advisories/2006/4523
https://exchange.xforce.ibmcloud.com/vulnerabilities/30304
http://secunia.com/advisories/22910
http://securitytracker.com/id?1017229
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102622-1
http://www.securityfocus.com/bid/21077
http://www.vupen.com/english/advisories/2006/4523
https://exchange.xforce.ibmcloud.com/vulnerabilities/30304

Get alerted when CVE-2006-6009 or the next vulnerability affects your stack