CVE

Id
39154  
CVE No.
CVE-2009-1719  
Status
Candidate  
Description
The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430461 39154 CVE-2009-1719 BUGTRAQ:20090616 ZDI-09-043: Apple Java CColorUIResource Pointer Derference Code Execution Vulnerability  View
430462 39154 CVE-2009-1719 URL:http://www.securityfocus.com/archive/1/archive/1/504364/100/0/threaded  View
430463 39154 CVE-2009-1719 MISC:http://www.zerodayinitiative.com/advisories/ZDI-09-043  View
430464 39154 CVE-2009-1719 CONFIRM:http://support.apple.com/kb/HT3632  View
430465 39154 CVE-2009-1719 APPLE:APPLE-SA-2009-06-15-1  View
430466 39154 CVE-2009-1719 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00003.html  View
430467 39154 CVE-2009-1719 BID:35381  View
430468 39154 CVE-2009-1719 URL:http://www.securityfocus.com/bid/35381  View
430469 39154 CVE-2009-1719 BID:35401  View
430470 39154 CVE-2009-1719 URL:http://www.securityfocus.com/bid/35401  View
430471 39154 CVE-2009-1719 XF:hotspot-ccolouruiresource-code-execution(51185)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40986 JVNDB-2009-001992 Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性 Apple Mac OS の CFNetwork には、302 リダイレクションによって証明書の警告メッセージが表示された場合に、任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性が存在します。 CVE-2009-1723 39154 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001992.html  View