PT-2009-5102 · Sun+1 · Sun Java Se 6+1

Publicado 2009-08-10 · Atualizado 2018-10-10 · CVE-2009-2718

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE 6 versions prior to Update 15

Description The issue concerns the Abstract Window Toolkit (AWT) implementation on X11, where the distance from the window border to the Security Warning Icon is not properly constrained. This makes it easier for attackers to deceive users into interacting unsafely with untrusted applets.

Recommendations For Sun Java SE 6 versions prior to Update 15, update to Update 15 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-2718

RHSA-2009:1200

Produtos afetados

Java Platform

Sun Java Se 6

Referências · 9

• http://secunia.com/advisories/37460 · Nota
• http://vmware.com/security/advisories/VMSA-2009-0016.html · Nota
• http://java.sun.com/javase/6/webnotes/6u15.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2718 · Nota
• http://secunia.com/advisories/37386 · Nota
• http://vupen.com/english/advisories/2009/3316 · Nota
• http://securityfocus.com/archive/1/507985/100/0/threaded · Nota
• http://security.gentoo.org/glsa/glsa-200911-02.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2718 · Nota de Segurança