PT-2009-5102 · Sun+1 · Sun Java Se 6+1

Published 2009-08-10 · Updated 2018-10-10 · CVE-2009-2718

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE 6 versions prior to Update 15

Description The issue concerns the Abstract Window Toolkit (AWT) implementation on X11, where the distance from the window border to the Security Warning Icon is not properly constrained. This makes it easier for attackers to deceive users into interacting unsafely with untrusted applets.

Recommendations For Sun Java SE 6 versions prior to Update 15, update to Update 15 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-2718

RHSA-2009:1200

Affected Products

Java Platform

Sun Java Se 6

References · 9

• http://security.gentoo.org/glsa/glsa-200911-02.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2718 · Security Note
• http://secunia.com/advisories/37460 · Note
• http://vmware.com/security/advisories/VMSA-2009-0016.html · Note
• http://java.sun.com/javase/6/webnotes/6u15.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2718 · Note
• http://secunia.com/advisories/37386 · Note
• http://vupen.com/english/advisories/2009/3316 · Note
• http://securityfocus.com/archive/1/507985/100/0/threaded · Note