NVD

Id
48417  
Name
CVE-2009-1107  
Description
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-25  
Modified Date
2010-08-21  
Seq
2009-1107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243762 48417 CVE-2009-1107 SSRT090058  View
243763 48417 CVE-2009-1107 SUSE-SA:2009:016  View
243764 48417 CVE-2009-1107 SUSE-SR:2009:011  View
243765 48417 CVE-2009-1107 SUSE-SA:2009:036  View
243766 48417 CVE-2009-1107 HPSBUX02429  View
243767 48417 CVE-2009-1107 oval:org.mitre.oval:def:6585  View
243768 48417 CVE-2009-1107 GLSA-200911-02  View
243769 48417 CVE-2009-1107 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-14-1  View
243770 48417 CVE-2009-1107 254611  View
243771 48417 CVE-2009-1107 http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm  View
243772 48417 CVE-2009-1107 http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm  View
243773 48417 CVE-2009-1107 RHSA-2009:0392  View
243774 48417 CVE-2009-1107 RHSA-2009:0394  View
243775 48417 CVE-2009-1107 RHSA-2009:1038  View
243776 48417 CVE-2009-1107 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
243777 48417 CVE-2009-1107 34240  View
243778 48417 CVE-2009-1107 1021920  View
243779 48417 CVE-2009-1107 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
243780 48417 CVE-2009-1107 ADV-2009-1426  View
243781 48417 CVE-2009-1107 ADV-2009-3316  View
243782 48417 CVE-2009-1107 jre-plugin-signedapplet-unauth-access(49460)  View
243783 48417 CVE-2009-1107 RHSA-2009:1198  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40164 JVNDB-2009-001170 JDK および JRE の Java プラグインにおけるセキュリティ警告文を非表示にされる脆弱性 Java SE Development Kit (JDK) および Java Runtime Environment (JRE) の Java プラグインには、セキュリティ警告文を表示させないことにより、署名されたアプレットと信じるようユーザをだますことが可能な脆弱性が存在します。 CVE-2009-1107 38538 CVE-2009-1107 48417 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001170.html 2009-03-24 2009-11-11 View