CVE-2009-1105: Sun Java

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.

Affected products

• Sun Java: any version

Published 2009-03-25. Last modified 2026-06-16.