PT-2009-6093 · Sun+2 · Sun Java Se+2

Publicado 2009-11-05 · Atualizado 2018-10-30 · CVE-2009-3868

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java SE versions 5.0 before Update 22 Sun Java SE versions 6 before Update 17 Sun Java SE SDK and JRE versions 1.3.x before 1.3.1 27 Sun Java SE SDK and JRE versions 1.4.x before 1.4.2 24

Description The issue allows remote attackers to gain privileges via a crafted image file due to improper parsing of color profiles.

Recommendations For Sun Java SE versions 5.0 before Update 22, update to Update 22 or later. For Sun Java SE versions 6 before Update 17, update to Update 17 or later. For Sun Java SE SDK and JRE versions 1.3.x before 1.3.1 27, update to 1.3.1 27 or later. For Sun Java SE SDK and JRE versions 1.4.x before 1.4.2 24, update to 1.4.2 24 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-3868

HPSBUX02503

RHSA-2009:1551

RHSA-2009:1560

RHSA-2009:1571

RHSA-2009:1643

RHSA-2009:1647

RHSA-2009:1694

RHSA-2010:0043

Produtos afetados

Hp-Ux

Java Platform

Sun Java Se

Referências · 40

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_setdifficm_bof.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_getsoundbank_bof.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3876 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html · Aviso do Fabricante
• http://support.apple.com/kb/HT3969 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3868 · Nota
• http://securitytracker.com/id?1023132 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3872 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2009-1694.html · Aviso do Fabricante
• http://java.sun.com/javase/6/webnotes/6u17.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3871 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3873 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html · Aviso do Fabricante
• http://support.apple.com/kb/HT3970 · Nota