| Package | Affected versions | Patched versions |
|---|---|---|
| jdk | = 5.0= 6≤ 5.0≤ 6 | |
| jre | = 1.4.2= 1.4.2_01= 1.4.2_02= 1.4.2_03= 1.4.2_04= 1.4.2_05= 1.4.2_06= 1.4.2_07= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_8= 1.4.2_9= 5.0= 6≤ 1.4.2_17≤ 5.0≤ 6 | |
| sdk | = 1.4.2= 1.4.2_01= 1.4.2_02= 1.4.2_03= 1.4.2_04= 1.4.2_05= 1.4.2_06= 1.4.2_07= 1.4.2_08= 1.4.2_09= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17 |
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free