PT-2009-5085 · Sun+2 · Sun Java Se 6+2

Marc Schoenefeld · Published 2009-08-06 · Updated 2017-09-19 · CVE-2009-2690

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Java SE 6 versions prior to Update 15 OpenJDK (affected versions not specified)

Description The issue allows context-dependent attackers to obtain sensitive information via an untrusted applet or application, by exploiting the encoder in the affected software, which grants read access to private variables.

Recommendations For Sun Java SE 6 versions prior to Update 15, update to Update 15 or later. For OpenJDK, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-2690

RHSA-2009:1200

RHSA-2009:1201

RHSA-2009_1201

Affected Products

Openjdk

Red Hat

Sun Java Se 6

References · 39

• https://bdu.fstec.ru/vul/2015-02870 · Security Note
• https://bdu.fstec.ru/vul/2015-04032 · Security Note
• https://rhn.redhat.com/errata/RHSA-2009-1201.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04033 · Security Note
• http://secunia.com/advisories/36176 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02872 · Security Note
• https://bdu.fstec.ru/vul/2015-02871 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00325.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02869 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:209 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2009-1200.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04031 · Security Note
• http://secunia.com/advisories/36180 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00310.html · Vendor Advisory