PT-2009-3680 · Oracle+2 · Java Se Development Kit+4

Publicado 2009-03-25 · Atualizado 2018-10-10 · CVE-2009-1102

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 12 and earlier

Description The issue allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."

Recommendations For Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 12 and earlier, update to a version later than 6 Update 12 to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-1102

HPSBUX02429

RHSA-2009:0377

RHSA-2009:0392

RHSA-2009_0377

Produtos afetados

Hp-Ux

Java Platform

Java Runtime Environment

Java Se Development Kit

Red Hat

Referências · 69

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=124344236532162&w=2 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1101 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1102 · Nota de Segurança
• http://vupen.com/english/advisories/2009/1426 · Nota
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTc0NTEzMw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html · Aviso do Fabricante
• http://ubuntu.com/usn/usn-748-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2009-0581 · Nota
• http://securityfocus.com/bid/34240 · Nota
• https://rhn.redhat.com/errata/RHSA-2009-0377.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2009-1097 · Nota
• https://access.redhat.com/security/cve/CVE-2009-1098 · Nota
• http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html · Nota