NVD

Id
49916  
Name
CVE-2009-2675  
Description
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-05  
Modified Date
2012-10-22  
Seq
2009-2675  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252456 49916 CVE-2009-2675 20090804 Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability  View
252457 49916 CVE-2009-2675 APPLE-SA-2009-09-03-1  View
252458 49916 CVE-2009-2675 SUSE-SA:2009:043  View
252459 49916 CVE-2009-2675 SUSE-SR:2009:016  View
252460 49916 CVE-2009-2675 SUSE-SA:2009:053  View
252461 49916 CVE-2009-2675 HPSBUX02476  View
252462 49916 CVE-2009-2675 oval:org.mitre.oval:def:10840  View
252463 49916 CVE-2009-2675 oval:org.mitre.oval:def:8415  View
252464 49916 CVE-2009-2675 GLSA-200911-02  View
252465 49916 CVE-2009-2675 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1  View
252466 49916 CVE-2009-2675 263488  View
252467 49916 CVE-2009-2675 MDVSA-2009:209  View
252468 49916 CVE-2009-2675 http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html  View
252469 49916 CVE-2009-2675 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
252470 49916 CVE-2009-2675 TA09-294A  View
252471 49916 CVE-2009-2675 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
252472 49916 CVE-2009-2675 ADV-2009-2543  View
252473 49916 CVE-2009-2675 ADV-2009-3316  View
252474 49916 CVE-2009-2675 http://www.zerodayinitiative.com/advisories/ZDI-09-049/  View
252475 49916 CVE-2009-2675 jre-pak200-bo(52307)  View
252476 49916 CVE-2009-2675 RHSA-2009:1199  View
252477 49916 CVE-2009-2675 RHSA-2009:1200  View
252478 49916 CVE-2009-2675 RHSA-2009:1201  View
252479 49916 CVE-2009-2675 FEDORA-2009-8329  View
252480 49916 CVE-2009-2675 FEDORA-2009-8337  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40981 JVNDB-2009-001987 Sun JRE の unpack200 ユーティリティにおける整数オーバーフローの脆弱性 Sun Java Runtime Environment (JRE) の unpack200 ユーティリティには、圧縮された Pack200 JAR ファイルのヘッダにある length フィールドの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-2675 40106 CVE-2009-2675 49916 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001987.html 2009-08-04 2009-12-21 View