PT-2009-5107 · Sun · Sun Java Se

Published 2009-08-10 · Updated 2018-10-10 · CVE-2009-2723

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java SE version 5.0 before Update 20

Description The issue concerns an unspecified vulnerability in deserialization in the Provider class. The impact and attack vectors of this issue are unknown.

Recommendations For Sun Java SE version 5.0 before Update 20, update to a version that includes the fix for BugId 6444262 to resolve the issue.

Fix

Related Identifiers

CVE-2009-2723

RHSA-2009:1199

Affected Products

Sun Java Se

References · 12

• http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2723 · Security Note
• http://security.gentoo.org/glsa/glsa-200911-02.xml · Vendor Advisory
• http://java.sun.com/j2se/1.5.0/ReleaseNotes.html · Vendor Advisory
• http://secunia.com/advisories/37460 · Note
• http://vmware.com/security/advisories/VMSA-2009-0016.html · Note
• http://secunia.com/advisories/37386 · Note
• http://vupen.com/english/advisories/2009/3316 · Note
• http://securityfocus.com/archive/1/507985/100/0/threaded · Note
• http://vupen.com/english/advisories/2009/2543 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2723 · Note