NVD

Id
48407  
Name
CVE-2009-1097  
Description
Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-25  
Modified Date
2012-10-22  
Seq
2009-1097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243529 48407 CVE-2009-1097 SSRT090058  View
243530 48407 CVE-2009-1097 20090326 Sun Java Runtine Environment (JRE) GIF Decoding Heap Corruption Vulnerability  View
243531 48407 CVE-2009-1097 20090326 Sun Java Web Start (JWS ) PNG Decoding Integer Overflow Vulnerability  View
243532 48407 CVE-2009-1097 SUSE-SA:2009:016  View
243533 48407 CVE-2009-1097 SUSE-SA:2009:029  View
243534 48407 CVE-2009-1097 SUSE-SA:2009:036  View
243535 48407 CVE-2009-1097 HPSBUX02429  View
243536 48407 CVE-2009-1097 oval:org.mitre.oval:def:11241  View
243537 48407 CVE-2009-1097 oval:org.mitre.oval:def:6288  View
243538 48407 CVE-2009-1097 GLSA-200911-02  View
243539 48407 CVE-2009-1097 254571  View
243540 48407 CVE-2009-1097 http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm  View
243541 48407 CVE-2009-1097 DSA-1769  View
243542 48407 CVE-2009-1097 MDVSA-2009:137  View
243543 48407 CVE-2009-1097 MDVSA-2009:162  View
243544 48407 CVE-2009-1097 http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html  View
243545 48407 CVE-2009-1097 RHSA-2009:0392  View
243546 48407 CVE-2009-1097 RHSA-2009:1038  View
243547 48407 CVE-2009-1097 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
243548 48407 CVE-2009-1097 34240  View
243549 48407 CVE-2009-1097 1021913  View
243550 48407 CVE-2009-1097 USN-748-1  View
243551 48407 CVE-2009-1097 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
243552 48407 CVE-2009-1097 ADV-2009-1426  View
243553 48407 CVE-2009-1097 ADV-2009-3316  View
243554 48407 CVE-2009-1097 jre-gif-file-bo(49475)  View
243555 48407 CVE-2009-1097 RHSA-2009:0377  View
243556 48407 CVE-2009-1097 RHSA-2009:1198  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40152 JVNDB-2009-001158 JDK および JRE における PNG イメージおよび GIF イメージの処理に関するバッファオーバーフローの脆弱性 Java SE Development Kit (JDK) および Java Runtime Environment (JRE) には、PNG イメージや GIF イメージの処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2009-1097 38528 CVE-2009-1097 48407 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001158.html 2009-03-24 2009-11-10 View