CVE-2009-2716

published 2009-08-10

CVE-2009-2716: The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sun	java_se	<= 6	—
vmware	esxi	—	—
vmware	vmware_tools	—	—
vmware	vmware_vcenter_server	—	—
vmware	vmware_vsphere	—	—
vmware	vmware_workstation	—	—