PT-2009-5983 · Oracle+1 · Java Runtime Environment+2

Marc Schoenefeld · Published 2009-11-09 · Updated 2018-10-30 · CVE-2009-3728

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions 5.0 before Update 22 Java Runtime Environment (JRE) versions 6 before Update 17 OpenJDK (affected versions not specified)

Description A directory traversal issue exists in the ICC Profile.getInstance method, allowing remote attackers to determine the existence of local International Color Consortium (ICC) profile files by using a .. (dot dot) in a pathname.

Recommendations For Java Runtime Environment (JRE) versions 5.0 before Update 22, update to version 5.0 Update 22 or later. For Java Runtime Environment (JRE) versions 6 before Update 17, update to version 6 Update 17 or later. For OpenJDK, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-3728

RHSA-2009:1560

RHSA-2009:1571

RHSA-2009:1584

RHSA-2009:1662

RHSA-2009_1584

Affected Products

Java Runtime Environment

Openjdk

Red Hat

References · 35

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_setdifficm_bof.rb · Exploit
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3728 · Security Note
• http://java.sun.com/j2se/1.5.0/ReleaseNotes.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03444 · Security Note
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03443 · Security Note
• https://bdu.fstec.ru/vul/2015-09404 · Security Note
• http://security.gentoo.org/glsa/glsa-200911-02.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:084 · Vendor Advisory
• http://java.sun.com/javase/6/webnotes/6u17.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2009-3875 · Note
• https://access.redhat.com/security/cve/CVE-2009-3884 · Note
• https://access.redhat.com/security/cve/CVE-2009-3879 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10520 · Note