Definition

The encoder in Sun Java SE 6 before Update 15 and OpenJDK grants read access to private variables with unspecified names which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.

oval:org.mitre.oval:def:9443

The encoder in Sun Java SE 6 before Update 15 and OpenJDK grants read access to private variables with unspecified names which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.

Family:

unix

Status:

ACCEPTED

Platform(s):

Oracle Linux 5
CentOS Linux 5
Red Hat Enterprise Linux 5

Class:

vulnerability

Reference(s):

CVE-2009-2690

Product(s):