NVD

Id
49911  
Name
CVE-2009-2670  
Description
The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-05  
Modified Date
2012-10-22  
Seq
2009-2670  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252331 49911 CVE-2009-2670 http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20  View
252332 49911 CVE-2009-2670 http://java.sun.com/javase/6/webnotes/6u15.html  View
252333 49911 CVE-2009-2670 APPLE-SA-2009-09-03-1  View
252334 49911 CVE-2009-2670 SUSE-SA:2009:043  View
252335 49911 CVE-2009-2670 SUSE-SR:2009:016  View
252336 49911 CVE-2009-2670 SUSE-SA:2009:053  View
252337 49911 CVE-2009-2670 SSRT090250  View
252338 49911 CVE-2009-2670 oval:org.mitre.oval:def:11326  View
252339 49911 CVE-2009-2670 oval:org.mitre.oval:def:8022  View
252340 49911 CVE-2009-2670 GLSA-200911-02  View
252341 49911 CVE-2009-2670 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1  View
252342 49911 CVE-2009-2670 263408  View
252343 49911 CVE-2009-2670 MDVSA-2009:209  View
252344 49911 CVE-2009-2670 http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html  View
252345 49911 CVE-2009-2670 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
252346 49911 CVE-2009-2670 35939  View
252347 49911 CVE-2009-2670 1022658  View
252348 49911 CVE-2009-2670 TA09-294A  View
252349 49911 CVE-2009-2670 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
252350 49911 CVE-2009-2670 ADV-2009-2543  View
252351 49911 CVE-2009-2670 ADV-2009-3316  View
252352 49911 CVE-2009-2670 jre-jdk-audiosystem-priv-escalation(52306)  View
252353 49911 CVE-2009-2670 RHSA-2009:1199  View
252354 49911 CVE-2009-2670 RHSA-2009:1200  View
252355 49911 CVE-2009-2670 RHSA-2009:1201  View
252356 49911 CVE-2009-2670 FEDORA-2009-8329  View
252357 49911 CVE-2009-2670 FEDORA-2009-8337  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40976 JVNDB-2009-001982 Sun JRE のオーディオシステムにおける重要な情報が取得される脆弱性 Sun Java Runtime Environment (JRE) のオーディオシステムには、信頼されていないアプレットおよび Java Web Start アプリケーションから、java.lang.System プロパティへのアクセスを抑止しないため、これらのプロパティを読まれることにより重要な情報が取得される脆弱性が存在します。 CVE-2009-2670 40101 CVE-2009-2670 49911 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001982.html 2009-08-04 2009-12-21 View