Candidate: CVE-2009-2718 PublicDate: 2009-08-10 20:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2718 http://java.sun.com/javase/6/webnotes/6u15.html Description: The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended constraint on distance from the window border to the Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet. Ubuntu-Description: Notes: kees> Sun bug 6818787 Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_sun-java6: upstream_sun-java6: released (6.15) dapper_sun-java6: DNE hardy_sun-java6: released (6.20dlj-0ubuntu1.8.04) intrepid_sun-java6: needs-triage (reached end-of-life) jaunty_sun-java6: released (6.20dlj-0ubuntu1.9.04) karmic_sun-java6: released (6.20dlj-0ubuntu1.9.10) lucid_sun-java6: released (6.20dlj-1ubuntu3) maverick_sun-java6: not-affected natty_sun-java6: not-affected devel_sun-java6: not-affected Patches_sun-java5: upstream_sun-java5: needs-triage dapper_sun-java5: ignored (reached end-of-life) hardy_sun-java5: ignored (upstream sun-java5 is EoL) intrepid_sun-java5: needs-triage (reached end-of-life) jaunty_sun-java5: ignored (reached end-of-life) karmic_sun-java5: DNE lucid_sun-java5: DNE maverick_sun-java5: DNE natty_sun-java5: DNE devel_sun-java5: DNE Patches_openjdk-6: upstream: http://hg.openjdk.java.net/jdk7/awt/jdk/rev/e0636bb69562 upstream_openjdk-6: released (6b15) dapper_openjdk-6: DNE hardy_openjdk-6: not-affected (code not present) intrepid_openjdk-6: not-affected (code not present) jaunty_openjdk-6: not-affected (code not present) karmic_openjdk-6: not-affected (6b16-1.6.1-0ubuntu1) lucid_openjdk-6: not-affected (6b16-1.6.1-0ubuntu1) maverick_openjdk-6: not-affected (6b16-1.6.1-0ubuntu1) natty_openjdk-6: not-affected (6b16-1.6.1-0ubuntu1) devel_openjdk-6: not-affected (6b16-1.6.1-0ubuntu1)