PT-2009-5085 · Sun+2 · Sun Java Se 6+2

Marc Schoenefeld · Publicado 2009-08-06 · Atualizado 2017-09-19 · CVE-2009-2690

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Java SE 6 versions prior to Update 15 OpenJDK (affected versions not specified)

Description The issue allows context-dependent attackers to obtain sensitive information via an untrusted applet or application, by exploiting the encoder in the affected software, which grants read access to private variables.

Recommendations For Sun Java SE 6 versions prior to Update 15, update to Update 15 or later. For OpenJDK, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-2690

RHSA-2009:1200

RHSA-2009:1201

RHSA-2009_1201

Produtos afetados

Openjdk

Red Hat

Sun Java Se 6

Referências · 39

• https://access.redhat.com/security/cve/CVE-2009-2672 · Nota
• https://bdu.fstec.ru/vul/2015-02870 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9443 · Nota
• https://bdu.fstec.ru/vul/2015-04032 · Nota de Segurança
• http://vupen.com/english/advisories/2009/2543 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=513223 · Nota
• https://access.redhat.com/security/cve/CVE-2009-2690 · Nota
• https://rhn.redhat.com/errata/RHSA-2009-1201.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04033 · Nota de Segurança
• http://secunia.com/advisories/36176 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-02872 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2009-2670 · Nota
• https://access.redhat.com/security/cve/CVE-2009-2476 · Nota
• https://access.redhat.com/security/cve/CVE-2009-2674 · Nota