CVE-2006-6745
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime...
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
Exploit likelihood
What each source reports
NVD Score used
9.3
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
- Record
CVE-2006-6745- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
- Record
CVE-2006-6745- Updated
- 2026-11-02
EUVDEUVD-2006-6728 No score
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
- Record
EUVD-2006-6728- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xhqx-5mvc-wmcf No score
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime...
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
- Record
GHSA-xhqx-5mvc-wmcf- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el3 | 0:1.4.2.7-1jpp.4.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el3 | 0:1.4.2.7-1jpp.4.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el3 | 0:1.4.2.7-1jpp.4.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el3 | 0:1.4.2.7-1jpp.4.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el3 | 0:1.4.2.7-1jpp.4.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el3 | 0:1.4.2.7-1jpp.4.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el4 | 0:1.4.2.7-1jpp.4.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el4 | 0:1.4.2.7-1jpp.4.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el4 | 0:1.4.2.7-1jpp.4.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el4 | 0:1.4.2.7-1jpp.4.el4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el4 | 0:1.4.2.7-1jpp.4.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el4 | 0:1.4.2.7-1jpp.4.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.7-1jpp.4.el4 | 0:1.4.2.7-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 1:1.5.0.3-1jpp.3.el4 | 1:1.5.0.3-1jpp.3.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 1:1.5.0.3-1jpp.3.el4 | 1:1.5.0.3-1jpp.3.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 1:1.5.0.3-1jpp.3.el4 | 1:1.5.0.3-1jpp.3.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 1:1.5.0.3-1jpp.3.el4 | 1:1.5.0.3-1jpp.3.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 1:1.5.0.3-1jpp.3.el4 | 1:1.5.0.3-1jpp.3.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 1:1.5.0.3-1jpp.3.el4 | 1:1.5.0.3-1jpp.3.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 1:1.5.0.3-1jpp.3.el4 | 1:1.5.0.3-1jpp.3.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6745 is a high vulnerability (CVSS 9.3) in Sun Jre, published December 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.24%, the 88th percentile. No source names a fixed version.
References
securityfocus.com/bid/21673
docs.info.apple.com/article.html?artnum=307177
secunia.com/advisories/24468
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579
secunia.com/advisories/26049
redhat.com/support/errata/RHSA-2007-0062.html
Show 55 moreShow less
vupen.com/english/advisories/2007/1814
secunia.com/advisories/25283
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9621
secunia.com/advisories/24099
secunia.com/advisories/25404
secunia.com/advisories/24189
novell.com/linux/security/advisories/2007_45_java.html
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html
support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
novell.com/linux/security/advisories/2007_10_ibmjava.html
secunia.com/advisories/26119
secunia.com/advisories/23445
vupen.com/english/advisories/2007/4224
secunia.com/advisories/23650
secunia.com/advisories/23835
securitytracker.com/id?1017426
redhat.com/support/errata/RHSA-2007-0073.html
kb.cert.org/vuls/id/102289
gentoo.org/security/en/glsa/glsa-200705-20.xml
secunia.com/advisories/28115
sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1
dev2dev.bea.com/pub/advisory/240
vupen.com/english/advisories/2006/5074
vupen.com/english/advisories/2007/0936
security.gentoo.org/glsa/glsa-200702-08.xml
support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
us-cert.gov/cas/techalerts/TA07-022A.html
security.gentoo.org/glsa/glsa-200701-15.xml
nvd.nist.gov/vuln/detail/CVE-2006-6745
github.com/advisories/GHSA-xhqx-5mvc-wmcf
access.redhat.com/errata/RHSA-2007:0062
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=226981
bugzilla.redhat.com/show_bug.cgi?id=226984
www-128.ibm.com/developerworks/java/jdk/alerts
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0062.json
access.redhat.com/security/cve/CVE-2006-6731
bugzilla.redhat.com/show_bug.cgi?id=1618250
cve.org/CVERecord?id=CVE-2006-6731
nvd.nist.gov/vuln/detail/CVE-2006-6731
access.redhat.com/security/cve/CVE-2006-6736
bugzilla.redhat.com/show_bug.cgi?id=1618251
cve.org/CVERecord?id=CVE-2006-6736
nvd.nist.gov/vuln/detail/CVE-2006-6736
access.redhat.com/security/cve/CVE-2006-6737
bugzilla.redhat.com/show_bug.cgi?id=1618252
cve.org/CVERecord?id=CVE-2006-6737
nvd.nist.gov/vuln/detail/CVE-2006-6737
access.redhat.com/security/cve/CVE-2006-6745
bugzilla.redhat.com/show_bug.cgi?id=1618253
cve.org/CVERecord?id=CVE-2006-6745
access.redhat.com/errata/RHSA-2007:0073
bugzilla.redhat.com/show_bug.cgi?id=227990
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0073.json