PT-2009-3677 · Oracle+1 · Java Se Development Kit+2

Published 2009-03-25 · Updated 2018-10-10 · CVE-2009-1099

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java SE Development Kit (JDK) versions 5.0 Update 17 and earlier Java SE Development Kit (JDK) versions 6 Update 12 and earlier Java Runtime Environment (JRE) versions 5.0 Update 17 and earlier Java Runtime Environment (JRE) versions 6 Update 12 and earlier

Description The issue is related to an integer signedness error that allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font. This error bypasses a signed comparison and triggers a buffer overflow.

Recommendations For Java SE Development Kit (JDK) versions 5.0 Update 17 and earlier, update to a version later than Update 17. For Java SE Development Kit (JDK) versions 6 Update 12 and earlier, update to a version later than Update 12. For Java Runtime Environment (JRE) versions 5.0 Update 17 and earlier, update to a version later than Update 17. For Java Runtime Environment (JRE) versions 6 Update 12 and earlier, update to a version later than Update 12.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-1099

HPSBUX02429

RHSA-2009:0392

RHSA-2009:0394

RHSA-2009:1038

RHSA-2009:1198

RHSA-2009:1662

RHSA-2010:0043

Affected Products

Hp-Ux

Java Runtime Environment

Java Se Development Kit

References · 52

• http://redhat.com/support/errata/RHSA-2009-1038.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=124344236532162&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098 · Security Note
• https://rhn.redhat.com/errata/RHSA-2009-1198.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1101 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1102 · Security Note
• http://secunia.com/advisories/37386 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3316 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1099 · Security Note
• http://secunia.com/advisories/35255 · Vendor Advisory
• http://secunia.com/advisories/37460 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 · Vendor Advisory