CVE-2006-4302: Sun j2se

Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days.

The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities.

Affected products

• Sun j2se: version 1.3.0_02 only; version 1.4.2 only; version 5.0 only; version 5.0_update1 only; version 5.0_update5 only
• Sun Java Web Start: version 1.0 only; version 1.0.1 only; version 1.0.1_01 only; version 1.0.1_02 only; version 1.2 only

Published 2006-08-23. Last modified 2026-06-16.