CVE-2009-1105

CVE-2009-1105 describes a vulnerability in the Java Plug-in for Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 10, 11, and 12. This flaw allows a user-assisted remote attacker to force a trusted applet to execute in an older, potentially vulnerable JRE version. The vulnerability carries a CVSS score of 7.5, indicating high severity. It is an easily exploitable network-based attack (AV:N/AC:L/Au:N) that could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has garnered minimal community discussion and media coverage, suggesting low public awareness.