PT-2009-3683 · Oracle+1 · Java Se Development Kit+2

Published 2009-03-25 · Updated 2018-10-10 · CVE-2009-1105

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 10 through 6 Update 12

Description The issue allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version.

Recommendations For Java SE Development Kit (JDK) and Java Runtime Environment (JRE) versions 6 Update 10 through 6 Update 12, update to a version that is not affected by this issue to prevent exploitation of vulnerabilities in older JRE versions.

Fix

Related Identifiers

CVE-2009-1105

HPSBUX02429

RHSA-2009:0392

RHSA-2009:1038

RHSA-2009:1198

RHSA-2010:0043

Affected Products

Hp-Ux

Java Runtime Environment

Java Se Development Kit

References · 46

• http://redhat.com/support/errata/RHSA-2009-1038.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096 · Security Note
• http://marc.info/?l=bugtraq&m=124344236532162&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1101 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1102 · Security Note
• https://rhn.redhat.com/errata/RHSA-2009-1198.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//May/msg00001.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1104 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1105 · Security Note