Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2009-2475
HistoryAug 10, 2009 - 6:30 p.m.

Design/Logic Flaw

2009-08-1018:30:00
PRIOn knowledge base
www.prio-n.com
1

6 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.

CPENameOperatorVersion
java_sele5.0
java_sele6

References

Related

ubuntucve 2
cve 3
veracode 2
prion 2
openvas 33
nessus 47
centos 1
oraclelinux 1
redhat 7
securityvulns 3
fedora 2
ubuntu 1
suse 2
gentoo 1
oracle 1
vmware 4
ubuntucve
ubuntucve
CVE-2009-2475
2009-08-10 00:00:00
CVE-2009-2673
2009-08-05 00:00:00
cve
cve
CVE-2009-2475
2009-08-10 18:30:00
CVE-2009-2673
2009-08-05 19:30:00
CVE-2009-3403
2009-10-22 18:30:00
veracode
veracode
Information Disclosure
2020-04-10 00:35:28
Access Restrictions Bypass
2020-04-10 00:35:30
prion
prion
Design/Logic Flaw
2009-08-05 19:30:00
Code injection
2009-10-22 18:30:00
openvas
openvas
Sun Java JDK/JRE Multiple Vulnerabilities - Aug09
2009-08-20 00:00:00
Sun Java JDK/JRE Multiple Vulnerabilities (Aug 2009)
2009-08-20 00:00:00
RedHat Security Advisory RHSA-2009:1199
2009-08-17 00:00:00
nessus
nessus
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1330)
2009-09-25 00:00:00
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1330)
2009-09-25 00:00:00
Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2009:209)
2009-08-24 00:00:00
centos
centos
java security update
2009-08-09 04:11:10
oraclelinux
oraclelinux
java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
redhat
redhat
(RHSA-2009:1201) Important: java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
(RHSA-2009:1199) Critical: java-1.5.0-sun security update
2009-08-06 00:00:00
(RHSA-2009:1236) Critical: java-1.5.0-ibm security update
2009-08-28 00:00:00
securityvulns
securityvulns
OpenJDK multiple security vulnerabilities
2009-08-11 00:00:00
[USN-814-1] openjdk-6 vulnerabilities
2009-08-11 00:00:00
US-CERT Technical Cyber Security Alert TA09-294A -- Oracle Updates for Multiple Vulnerabilities
2009-10-22 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: java-1.6.0-openjdk-1.6.0.0-27.b16.fc11
2009-08-07 04:59:49
[SECURITY] Fedora 10 Update: java-1.6.0-openjdk-1.6.0.0-20.b16.fc10
2009-08-07 05:02:36
ubuntu
ubuntu
OpenJDK vulnerabilities
2009-08-11 00:00:00
suse
suse
remote code execution in java-1_5_0-sun,java-1_6_0-sun
2009-08-07 15:43:16
remote code execution in java-1_6_0-ibm
2009-11-04 15:26:34
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00
oracle
oracle
Security | Oracle Critical Patch Update - October 2009
2009-10-20 00:00:00
vmware
vmware
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00

6 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON
Related for PRION:CVE-2009-2475
ubuntucve2cve3veracode2prion2openvas33nessus47centos1oraclelinux1redhat7securityvulns3fedora2ubuntu1suse2gentoo1oracle1vmware4