| Package | Affected versions | Patched versions |
|---|---|---|
| jdk | ≤ 6 | |
| jre | ≤ 6 |
The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free