CVE-2009-2674

{"id": "CVE-2009-2674", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2009-08-05T19:30:01.267", "references": [{"url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=125787273209737&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36162", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36176", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36180", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36248", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/37300", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/37386", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml", "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209", "source": "cve@mitre.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA09-294A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/2543", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-09-050/", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52339", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073", "source": "cve@mitre.org"}, {"url": "https://rhn.redhat.com/errata/RHSA-2009-1200.html", "source": "cve@mitre.org"}, {"url": "https://rhn.redhat.com/errata/RHSA-2009-1201.html", "source": "cve@mitre.org"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html", "source": "cve@mitre.org"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow."}, {"lang": "es", "value": "Un desbordamiento de enteros en el archivo javaws.exe en Sun Java Web Start en Sun Java Runtime Environment (JRE) en JDK y JRE versi\u00f3n 6 anterior a Update 15, permite a los atacantes dependiendo del contexto ejecutar c\u00f3digo arbitrario por medio de una imagen JPEG creada que no se maneja apropiadamente durante la visualizaci\u00f3n de una imagen de bienvenida, que desencadena un desbordamiento de b\u00fafer basado en la regi\u00f3n heap de la memoria."}], "lastModified": "2018-10-30T16:25:14.043", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA89349B-834C-42D0-84C6-CA73CE1F8B26"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7865369-9DE6-4C20-ACD2-CCC14ED54701"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8614E7A0-091C-4080-89FA-B2C7609B4AD7"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67E0818A-3675-4293-89FE-5001E36C0F38"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95112B98-B6B2-43FA-BF76-F518649CF3BE"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A18341A-3688-48E7-95AD-283EC9C95B4A"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E301C59A-47F5-4861-9091-D0002CBA5B7A"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCD4F889-710C-43C5-85DD-70E96F8FE313"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED195051-AAC7-4EE1-B936-18D1C8AD2498"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44146DF6-F368-4F17-B379-34194873D80F"}, {"criteria": "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BA9E6CD-F43F-487D-9638-406B72D51471"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26826BB7-0EF6-439B-87F4-5BCCEA3A8907"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDC09958-5286-4C16-AB6F-63B4BDD902B3"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82C6F76F-68FD-4794-9182-935D85910C1F"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6314C9DF-9421-445D-ABCC-79EDCED23156"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"}, {"criteria": "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "119B72FA-8B85-4D1F-8A14-5B07204DAED5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}