CVEvulnerability

CVE-2006-4302

5.0 MEDIUM Published 2006-08-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities.

Affected configurations

• sun j2se 1.3.0 02 • sun j2se 1.4.2 • sun j2se 5.0 • sun j2se 5.0 update1 • sun j2se 5.0 update5 • sun java web start 1.0 • sun java web start 1.0.1 • sun java web start 1.0.1 01 • sun java web start 1.0.1 02 • sun java web start 1.2

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-757 Selection of Less-Secure Algorithm During Negotiation weakness

References