PT-2009-3683 · Oracle+1 · Java Se Development Kit+2

Publicado 2009-03-25 · Atualizado 2018-10-10 · CVE-2009-1105

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 10 through 6 Update 12

Description The issue allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version.

Recommendations For Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 10 through 6 Update 12, update to a version that is not affected by this issue to prevent exploitation of vulnerabilities in older JRE versions.

Correção

Identificadores relacionados

CVE-2009-1105

HPSBUX02429

RHSA-2009:0392

RHSA-2009:1038

RHSA-2009:1198

RHSA-2010:0043

Produtos afetados

Hp-Ux

Java Runtime Environment

Java Se Development Kit

Referências · 46

• http://redhat.com/support/errata/RHSA-2009-1038.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=124344236532162&w=2 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1101 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1102 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2009-1198.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1426 · Nota
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTc0NTEzMw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html · Aviso do Fabricante
• http://securityfocus.com/bid/34240 · Nota
• http://lists.apple.com/archives/security-announce/2010//May/msg00001.html · Aviso do Fabricante
• http://vmware.com/security/advisories/VMSA-2009-0016.html · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1 · Aviso do Fabricante
• http://support.apple.com/kb/HT4171 · Nota