CVE-2009-1106

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files…

published March 25, 2009

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03558 · 89.3th percentile
Published
2009-03-25T23:00Z
EPSS history
Timeline
  • 25 MAR 23:00Z
    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files…
    cvelistv5