[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-2676Date: (C)2009-08-05   (M)2024-02-22


Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1022657
http://www.securityfocus.com/archive/1/507985/100/0/threaded
SUNALERT-263490
BID-35946
SECUNIA-36176
SECUNIA-36199
SECUNIA-36248
SECUNIA-37300
SECUNIA-37386
SECUNIA-37460
OSVDB-56789
ADV-2009-3316
GLSA-200911-02
HPSBUX02476
RHSA-2009:1199
RHSA-2009:1200
SUSE-SA:2009:043
SUSE-SA:2009:053
TA09-294A
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1
http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
oval:org.mitre.oval:def:8453

CPE    108
cpe:/a:sun:jdk:1.5.0:update17
cpe:/a:sun:jdk:1.5.0:update18
cpe:/a:sun:jre
cpe:/a:sun:jdk:1.5.0:update13
...
OVAL    3
oval:org.secpod.oval:def:400074
oval:org.secpod.oval:def:19706
oval:org.secpod.oval:def:700354

© SecPod Technologies