NVD

Id
48416  
Name
CVE-2009-1106  
Description
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-25  
Modified Date
2012-03-23  
Seq
2009-1106  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243743 48416 CVE-2009-1106 HPSBMA02429  View
243744 48416 CVE-2009-1106 SUSE-SA:2009:016  View
243745 48416 CVE-2009-1106 SUSE-SA:2009:036  View
243746 48416 CVE-2009-1106 HPSBUX02429  View
243747 48416 CVE-2009-1106 oval:org.mitre.oval:def:6619  View
243748 48416 CVE-2009-1106 GLSA-200911-02  View
243749 48416 CVE-2009-1106 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1  View
243750 48416 CVE-2009-1106 254611  View
243751 48416 CVE-2009-1106 http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm  View
243752 48416 CVE-2009-1106 RHSA-2009:0392  View
243753 48416 CVE-2009-1106 RHSA-2009:1038  View
243754 48416 CVE-2009-1106 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
243755 48416 CVE-2009-1106 34240  View
243756 48416 CVE-2009-1106 1021920  View
243757 48416 CVE-2009-1106 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
243758 48416 CVE-2009-1106 ADV-2009-1426  View
243759 48416 CVE-2009-1106 ADV-2009-3316  View
243760 48416 CVE-2009-1106 jre-plugin-crossdomain-info-disclosure(49459)  View
243761 48416 CVE-2009-1106 RHSA-2009:1198  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40163 JVNDB-2009-001169 JDK および JRE の Java プラグインにおける crossdomain.xml ファイル の処理に関する脆弱性 Java SE Development Kit (JDK) および Java Runtime Environment (JRE) の Java プラグインには、crossdomain.xml ファイルを正しく解析しないことにより、アクセス制限を回避され、任意のサイトに接続が可能となる脆弱性が存在します。 CVE-2009-1106 38537 CVE-2009-1106 48416 6.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001169.html 2009-03-24 2009-11-11 View