CVE-2006-6737

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-26 · updated 2026-06-16

Description

Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The first issue."

Affected products

Sun Jdk: 1.5.0, 1.5.0-update1, 1.5.0-update2, 1.5.0-update3, 1.5.0-update4, 1.5.0-update5
Sun Jre: 1.3.1, 1.3.1_2, 1.3.1_03, 1.3.1_04, 1.3.1_05, 1.3.1_06 (+29)
Sun Sdk: 1.3.1, 1.3.1_01, 1.3.1_01a, 1.3.1_02, 1.3.1_03, 1.3.1_04 (+25)

References

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html
http://secunia.com/advisories/23398
http://secunia.com/advisories/23650
http://secunia.com/advisories/23835
http://secunia.com/advisories/24099
http://secunia.com/advisories/24189
http://secunia.com/advisories/25404
http://secunia.com/advisories/26049
http://secunia.com/advisories/26119
http://security.gentoo.org/glsa/glsa-200701-15.xml
http://security.gentoo.org/glsa/glsa-200702-08.xml
http://securitytracker.com/id?1017427

Get alerted when CVE-2006-6737 or the next vulnerability affects your stack