CVE-2009-2717

2022-10-0316:24:05

mitre

www.cve.org

cve-2009-2717

security warning icon missing

context-dependent attack

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.4%

JSON

The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet.

References

java.sun.com/javase/6/webnotes/6u15.html