PT-2009-6101 · Sun+3 · Java Se+3

Publicado 2009-11-05 · Atualizado 2018-10-30 · CVE-2009-3876

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE versions prior to JDK and JRE 5.0 Update 22 Sun Java SE versions prior to JDK and JRE 6 Update 17 Sun Java SE SDK and JRE 1.3.x versions prior to 1.3.1 27 Sun Java SE SDK and JRE 1.4.x versions prior to 1.4.2 24

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by providing crafted DER encoded data. This data is not properly decoded by the ASN.1 DER input stream parser.

Recommendations For Sun Java SE versions prior to JDK and JRE 5.0 Update 22, update to JDK and JRE 5.0 Update 22 or later. For Sun Java SE versions prior to JDK and JRE 6 Update 17, update to JDK and JRE 6 Update 17 or later. For Sun Java SE SDK and JRE 1.3.x versions prior to 1.3.1 27, update to SDK and JRE 1.3.1 27 or later. For Sun Java SE SDK and JRE 1.4.x versions prior to 1.4.2 24, update to SDK and JRE 1.4.2 24 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-3876

HPSBUX02503

RHSA-2009:1551

RHSA-2009:1560

RHSA-2009:1571

RHSA-2009:1584

RHSA-2009:1643

RHSA-2009:1647

RHSA-2009:1662

RHSA-2009:1694

RHSA-2009_1584

RHSA-2010:0043

Produtos afetados

Hp-Ux

Java Platform

Java Se

Red Hat

Referências · 55

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_setdifficm_bof.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_getsoundbank_bof.rb · Exploit
• https://access.redhat.com/security/cve/CVE-2009-3875 · Nota
• https://access.redhat.com/security/cve/CVE-2009-3884 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3876 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2009-3869 · Nota
• https://access.redhat.com/security/cve/CVE-2009-3728 · Nota
• https://access.redhat.com/security/cve/CVE-2009-3871 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3872 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2009:1584 · Nota
• https://access.redhat.com/security/cve/CVE-2009-2409 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10328 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3876 · Nota
• https://access.redhat.com/security/cve/CVE-2009-3873 · Nota
• http://redhat.com/support/errata/RHSA-2009-1694.html · Aviso do Fabricante