Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-2675
HistoryAug 05, 2009 - 7:30 p.m.

CVE-2009-2675

2009-08-0519:30:01
CWE-264
[email protected]
web.nvd.nist.gov
3

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.036

Percentile

91.7%

JSON

Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.

Affected configurations

Nvd
Node
sunjdkRange≤6update_13
OR
sunjdkMatch5.0update_1
OR
sunjdkMatch5.0update_10
OR
sunjdkMatch5.0update_11
OR
sunjdkMatch5.0update_12
OR
sunjdkMatch5.0update_13
OR
sunjdkMatch5.0update_14
OR
sunjdkMatch5.0update_15
OR
sunjdkMatch5.0update_16
OR
sunjdkMatch5.0update_17
OR
sunjdkMatch5.0update_2
OR
sunjdkMatch5.0update_3
OR
sunjdkMatch5.0update_4
OR
sunjdkMatch5.0update_5
OR
sunjdkMatch5.0update_6
OR
sunjdkMatch5.0update_7
OR
sunjdkMatch5.0update_8
OR
sunjdkMatch5.0update_9
OR
sunjdkMatch6update_1
OR
sunjdkMatch6update_10
OR
sunjdkMatch6update_11
OR
sunjdkMatch6update_12
OR
sunjdkMatch6update_2
OR
sunjdkMatch6update_3
OR
sunjdkMatch6update_4
OR
sunjdkMatch6update_5
OR
sunjdkMatch6update_6
OR
sunjdkMatch6update_7
OR
sunjdkMatch6update_8
OR
sunjdkMatch6update_9
OR
sunjreRange≤6update_13
OR
sunjreMatch5.0update_1
OR
sunjreMatch5.0update_10
OR
sunjreMatch5.0update_11
OR
sunjreMatch5.0update_12
OR
sunjreMatch5.0update_13
OR
sunjreMatch5.0update_14
OR
sunjreMatch5.0update_15
OR
sunjreMatch5.0update_16
OR
sunjreMatch5.0update_17
OR
sunjreMatch5.0update_19
OR
sunjreMatch5.0update_2
OR
sunjreMatch5.0update_3
OR
sunjreMatch5.0update_4
OR
sunjreMatch5.0update_5
OR
sunjreMatch5.0update_6
OR
sunjreMatch5.0update_7
OR
sunjreMatch5.0update_8
OR
sunjreMatch5.0update_9
OR
sunjreMatch6update_1
OR
sunjreMatch6update_10
OR
sunjreMatch6update_11
OR
sunjreMatch6update_12
OR
sunjreMatch6update_2
OR
sunjreMatch6update_3
OR
sunjreMatch6update_4
OR
sunjreMatch6update_5
OR
sunjreMatch6update_6
OR
sunjreMatch6update_7
OR
sunjreMatch6update_8
OR
sunjreMatch6update_9

References

Related

prion 2
cvelist 2
veracode 1
cve 2
zdi 1
ubuntucve 1
openvas 33
redhat 7
nessus 38
suse 2
nvd 1
oraclelinux 1
centos 1
securityvulns 3
fedora 2
ubuntu 1
oracle 1
vmware 4
gentoo 1
prion
prion
Integer overflow
2009-08-05 19:30:00
Code injection
2009-10-22 18:30:00
cvelist
cvelist
CVE-2009-2675
2009-08-05 19:00:00
CVE-2009-3403
2009-10-22 18:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:35:30
cve
cve
CVE-2009-2675
2009-08-05 19:30:01
CVE-2009-3403
2009-10-22 18:30:00
zdi
zdi
Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability
2009-08-05 00:00:00
ubuntucve
ubuntucve
CVE-2009-2675
2009-08-05 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1236
2009-09-02 00:00:00
RedHat Security Advisory RHSA-2009:1236
2009-09-02 00:00:00
Sun Java JDK/JRE Multiple Vulnerabilities - Aug09
2009-08-20 00:00:00
redhat
redhat
(RHSA-2009:1236) Critical: java-1.5.0-ibm security update
2009-08-28 00:00:00
(RHSA-2009:1582) Critical: java-1.6.0-ibm security update
2009-11-12 00:00:00
(RHSA-2009:1201) Important: java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
nessus
nessus
openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1162)
2009-08-10 00:00:00
openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-6395)
2009-10-06 00:00:00
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1161)
2009-08-10 00:00:00
suse
suse
remote code execution in java-1_5_0-sun,java-1_6_0-sun
2009-08-07 15:43:16
remote code execution in java-1_6_0-ibm
2009-11-04 15:26:34
nvd
nvd
CVE-2009-3403
2009-10-22 18:30:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
centos
centos
java security update
2009-08-09 04:11:10
securityvulns
securityvulns
OpenJDK multiple security vulnerabilities
2009-08-11 00:00:00
[USN-814-1] openjdk-6 vulnerabilities
2009-08-11 00:00:00
US-CERT Technical Cyber Security Alert TA09-294A -- Oracle Updates for Multiple Vulnerabilities
2009-10-22 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: java-1.6.0-openjdk-1.6.0.0-27.b16.fc11
2009-08-07 04:59:49
[SECURITY] Fedora 10 Update: java-1.6.0-openjdk-1.6.0.0-20.b16.fc10
2009-08-07 05:02:36
ubuntu
ubuntu
OpenJDK vulnerabilities
2009-08-11 00:00:00
oracle
oracle
Security | Oracle Critical Patch Update - October 2009
2009-10-20 00:00:00
vmware
vmware
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.036

Percentile

91.7%

JSON
Related for NVD:CVE-2009-2675
prion2cvelist2veracode1cve2zdi1ubuntucve1openvas33redhat7nessus38suse2nvd1oraclelinux1centos1securityvulns3fedora2ubuntu1oracle1vmware4gentoo1