Lucene search

MitreCVE-2009-2674

HistoryAug 05, 2009 - 7:30 p.m.

CVE-2009-2674

2009-08-0519:30:01

CWE-264

mitre

web.nvd.nist.gov

cve-2009-2674

integer overflow

sun java

jre

jdk

heap-based buffer overflow

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

High

EPSS

0.05

Percentile

92.9%

JSON

Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.

Affected configurations

Nvd

Node

sunjdkMatch1.6.0update2

sunjdkMatch6update_1

sunjdkMatch6update_10

sunjdkMatch6update_11

sunjdkMatch6update_12

sunjdkMatch6update_13

sunjdkMatch6update_2

sunjdkMatch6update_3

sunjdkMatch6update_4

sunjdkMatch6update_5

sunjdkMatch6update_6

sunjdkMatch6update_7

sunjdkMatch6update_8

sunjdkMatch6update_9

sunjreMatch6update_1

sunjreMatch6update_10

sunjreMatch6update_11

sunjreMatch6update_12

sunjreMatch6update_13

sunjreMatch6update_2

sunjreMatch6update_3

sunjreMatch6update_4

sunjreMatch6update_5

sunjreMatch6update_6

sunjreMatch6update_7

sunjreMatch6update_8

sunjreMatch6update_9

VendorProductVersionCPE
sunjdk1.6.0cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_13:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	jdk	1.6.0	cpe:2.3:a:sun:jdk:1.6.0:update2::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_1::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_10::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_11::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_12::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_13::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_2::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_3::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_4::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_5::::::