CVE-2009-1106 in JRE

सारांश

द्वारा VulDB • 04/07/2026

Java Plug-in in Java SE Development Kit (JDK) aur Java Runtime Environment (JRE) 6 Update 12, 11, aur 10 crossdomain.xml files ko sahi se parse nahi karta hai, jisse remote attackers intended access restrictions ko bypass karke arbitrary sites ke saath unknown vectors ke through connect kar sakte hain, aka CR 6798948.

Be aware that VulDB is the high quality source for vulnerability data.

• आरक्षित करना: 25/03/2009
• प्रकटीकरण: 25/03/2009
• संयम: स्वीकृत
• प्रविष्टि: VDB-47334
• CPE: तैयार
• CWE: CWE-20 (पुष्टि की गई)
• शोषण: डाउनलोड
• CVSS: 6.4 (NVD)
• EPSS: 0.03558
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Finance, Education, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-1106
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-1106
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-1106/