The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in old zip and certificate handling and have unspecified other impact via unknown vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Java_se | Sun | * | 6 (including) |