Description
Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "second and third issues."
References
- ADV-2006-0828 vdb-entry
- GLSA-200602-07 vendor-advisory
- 1015596 vdb-entry
- ADV-2006-0467 vdb-entry
- 18884 third-party-advisory
- sun-jre-reflection-privilege-elevation(24561) vdb-entry
- 18760 third-party-advisory
- VU#759996 third-party-advisory
- ADV-2006-1398 vdb-entry
- http://docs.info.apple.com/article.html?artnum=303658
- 102171 vendor-advisory