CVE-2006-0615

MEDIUM 4.0CVE-2006-0615 · Published 09/02/2006 · updated 16/06/2026

In short

CVE-2006-0615 is a MEDIUM (CVSS 4.0) vulnerability affecting jdk (sun), jre (sun), sdk (sun).
Chance of exploitation in the next 30 days (EPSS): 5.3%, higher than 92.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk sun	`= 1.5.0`	No fix yet
jre sun	`= 1.4.2= 1.4.2_1= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0`	No fix yet
sdk sun	`= 1.4.2= 1.4.2_1= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9`	No fix yet

Description

Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "second and third issues."

References

docs.info.apple.com/article.html · Broken Link
secunia.com/advisories/18760 · Patch
secunia.com/advisories/18884 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
sunsolve.sun.com/search/document.do · Broken Link
gentoo.org/security/en/glsa/glsa-200602-07.xml · Third Party Advisory
kb.cert.org/vuls/id/759996 · Third Party Advisory
vupen.com/english/advisories/2006/0467 · Permissions Required
vupen.com/english/advisories/2006/0828 · Permissions Required
vupen.com/english/advisories/2006/1398 · Permissions Required
exchange.xforce.ibmcloud.com/vulnerabilities/24561 · Third Party Advisory

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

sun

= 1.5.0

No fix yet

jre

sun

= 1.4.2= 1.4.2_1= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0

No fix yet

sdk

sun

= 1.4.2= 1.4.2_1= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9

No fix yet

More vulnerabilities in jdk

See all →