CVE Vulnerabilities

CVE-2009-2674

Published: Aug 05, 2009 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM

Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.

Affected Software

Name Vendor Start Version End Version
Jdk Sun 1.6.0-update2 (including) 1.6.0-update2 (including)
Jdk Sun 6-update_1 (including) 6-update_1 (including)
Jdk Sun 6-update_10 (including) 6-update_10 (including)
Jdk Sun 6-update_11 (including) 6-update_11 (including)
Jdk Sun 6-update_12 (including) 6-update_12 (including)
Jdk Sun 6-update_13 (including) 6-update_13 (including)
Jdk Sun 6-update_2 (including) 6-update_2 (including)
Jdk Sun 6-update_3 (including) 6-update_3 (including)
Jdk Sun 6-update_4 (including) 6-update_4 (including)
Jdk Sun 6-update_5 (including) 6-update_5 (including)
Jdk Sun 6-update_6 (including) 6-update_6 (including)
Jdk Sun 6-update_7 (including) 6-update_7 (including)
Jdk Sun 6-update_8 (including) 6-update_8 (including)
Jdk Sun 6-update_9 (including) 6-update_9 (including)
Jre Sun 6-update_1 (including) 6-update_1 (including)
Jre Sun 6-update_10 (including) 6-update_10 (including)
Jre Sun 6-update_11 (including) 6-update_11 (including)
Jre Sun 6-update_12 (including) 6-update_12 (including)
Jre Sun 6-update_13 (including) 6-update_13 (including)
Jre Sun 6-update_2 (including) 6-update_2 (including)
Jre Sun 6-update_3 (including) 6-update_3 (including)
Jre Sun 6-update_4 (including) 6-update_4 (including)
Jre Sun 6-update_5 (including) 6-update_5 (including)
Jre Sun 6-update_6 (including) 6-update_6 (including)
Jre Sun 6-update_7 (including) 6-update_7 (including)
Jre Sun 6-update_8 (including) 6-update_8 (including)
Jre Sun 6-update_9 (including) 6-update_9 (including)
Extras for RHEL 4 RedHat java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4 *
Extras for RHEL 4 RedHat java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4 *
Red Hat Enterprise Linux 5 RedHat java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5 *
Red Hat Network Satellite Server v 5.3 RedHat java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5 *
Openjdk-6 Ubuntu hardy *
Openjdk-6 Ubuntu intrepid *
Openjdk-6 Ubuntu jaunty *
Openjdk-6 Ubuntu upstream *
Sun-java5 Ubuntu dapper *
Sun-java5 Ubuntu intrepid *
Sun-java6 Ubuntu hardy *
Sun-java6 Ubuntu intrepid *
Sun-java6 Ubuntu jaunty *
Sun-java6 Ubuntu karmic *
Sun-java6 Ubuntu lucid *
Sun-java6 Ubuntu upstream *

References