PT-2009-5071 · Sun+2 · Java Se+4

Published 2009-08-05 · Updated 2018-10-30 · CVE-2009-2676

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE versions prior to JDK and JRE 6 Update 15 Sun Java SE versions prior to JDK and JRE 5.0 Update 20 Java SE for Business in SDK and JRE versions prior to 1.4.2 22

Description The issue allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher. This can be achieved by exploiting an unspecified vulnerability in JNLPAppletlauncher.

Recommendations For Sun Java SE versions prior to JDK and JRE 6 Update 15, update to JDK and JRE 6 Update 15 or later. For Sun Java SE versions prior to JDK and JRE 5.0 Update 20, update to JDK and JRE 5.0 Update 20 or later. For Java SE for Business in SDK and JRE versions prior to 1.4.2 22, update to SDK and JRE 1.4.2 22 or later.

Fix

Related Identifiers

CVE-2009-2676

HPSBUX02476

RHSA-2009:1199

RHSA-2009:1200

RHSA-2009:1582

RHSA-2009:1662

RHSA-2010:0043

Affected Products

Hp-Ux

Jdk

Jre

Java Platform

Java Se

References · 41

• https://bdu.fstec.ru/vul/2015-02870 · Security Note
• http://secunia.com/advisories/37386 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2675 · Security Note
• http://vupen.com/english/advisories/2009/3316 · Vendor Advisory
• http://secunia.com/advisories/36248 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04032 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2673 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0217 · Security Note
• http://secunia.com/advisories/37460 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html · Vendor Advisory
• http://secunia.com/advisories/36199 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04033 · Security Note
• http://secunia.com/advisories/36176 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02872 · Security Note