6.8

CVE-2009-2676

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Java Se
Sun ≫ Java Se Edition business
Sun ≫ Jdk Update update19 Version <= 1.5.0
Sun ≫ Jdk Update update_14 Version <= 1.6.0
Sun ≫ Jdk Version 1.5.0
Sun ≫ Jdk Version 1.5.0 Update update1
Sun ≫ Jdk Version 1.5.0 Update update10
Sun ≫ Jdk Version 1.5.0 Update update11
Sun ≫ Jdk Version 1.5.0 Update update11_b03
Sun ≫ Jdk Version 1.5.0 Update update12
Sun ≫ Jdk Version 1.5.0 Update update13
Sun ≫ Jdk Version 1.5.0 Update update14
Sun ≫ Jdk Version 1.5.0 Update update15
Sun ≫ Jdk Version 1.5.0 Update update16
Sun ≫ Jdk Version 1.5.0 Update update17
Sun ≫ Jdk Version 1.5.0 Update update18
Sun ≫ Jdk Version 1.5.0 Update update2
Sun ≫ Jdk Version 1.5.0 Update update3
Sun ≫ Jdk Version 1.5.0 Update update4
Sun ≫ Jdk Version 1.5.0 Update update5
Sun ≫ Jdk Version 1.5.0 Update update6
Sun ≫ Jdk Version 1.5.0 Update update7
Sun ≫ Jdk Version 1.5.0 Update update8
Sun ≫ Jdk Version 1.5.0 Update update9
Sun ≫ Jdk Version 1.6.0 Update update_10
Sun ≫ Jdk Version 1.6.0 Update update_11
Sun ≫ Jdk Version 1.6.0 Update update_12
Sun ≫ Jdk Version 1.6.0 Update update_13
Sun ≫ Jdk Version 1.6.0 Update update_3
Sun ≫ Jdk Version 1.6.0 Update update_4
Sun ≫ Jdk Version 1.6.0 Update update_5
Sun ≫ Jdk Version 1.6.0 Update update_6
Sun ≫ Jdk Version 1.6.0 Update update_7
Sun ≫ Jdk Version 1.6.0 Update update1
Sun ≫ Jdk Version 1.6.0 Update update2
Sun ≫ Jre Update update19 Version <= 1.5.0
Sun ≫ Jre Update update_14 Version <= 1.6.0
Sun ≫ Jre Version 1.5.0
Sun ≫ Jre Version 1.5.0 Update update1
Sun ≫ Jre Version 1.5.0 Update update10
Sun ≫ Jre Version 1.5.0 Update update11
Sun ≫ Jre Version 1.5.0 Update update12
Sun ≫ Jre Version 1.5.0 Update update13
Sun ≫ Jre Version 1.5.0 Update update14
Sun ≫ Jre Version 1.5.0 Update update15
Sun ≫ Jre Version 1.5.0 Update update16
Sun ≫ Jre Version 1.5.0 Update update17
Sun ≫ Jre Version 1.5.0 Update update18
Sun ≫ Jre Version 1.5.0 Update update2
Sun ≫ Jre Version 1.5.0 Update update3
Sun ≫ Jre Version 1.5.0 Update update4
Sun ≫ Jre Version 1.5.0 Update update5
Sun ≫ Jre Version 1.5.0 Update update6
Sun ≫ Jre Version 1.5.0 Update update7
Sun ≫ Jre Version 1.5.0 Update update8
Sun ≫ Jre Version 1.5.0 Update update9
Sun ≫ Jre Version 1.6.0 Update update_1
Sun ≫ Jre Version 1.6.0 Update update_10
Sun ≫ Jre Version 1.6.0 Update update_11
Sun ≫ Jre Version 1.6.0 Update update_12
Sun ≫ Jre Version 1.6.0 Update update_13
Sun ≫ Jre Version 1.6.0 Update update_2
Sun ≫ Jre Version 1.6.0 Update update_3
Sun ≫ Jre Version 1.6.0 Update update_4
Sun ≫ Jre Version 1.6.0 Update update_5
Sun ≫ Jre Version 1.6.0 Update update_6
Sun ≫ Jre Version 1.6.0 Update update_7
Sun ≫ Java Se Edition business
Sun ≫ Jre Version <= 1.4.2_21
Sun ≫ Jre Version 1.4.0
Sun ≫ Jre Version 1.4.0_01
Sun ≫ Jre Version 1.4.0_02
Sun ≫ Jre Version 1.4.0_03
Sun ≫ Jre Version 1.4.0_04
Sun ≫ Jre Version 1.4.1
Sun ≫ Jre Version 1.4.1 Update update1
Sun ≫ Jre Version 1.4.1 Update update2
Sun ≫ Jre Version 1.4.1 Update update3
Sun ≫ Jre Version 1.4.1 Update update4
Sun ≫ Jre Version 1.4.1 Update update5
Sun ≫ Jre Version 1.4.1 Update update6
Sun ≫ Jre Version 1.4.1 Update update7
Sun ≫ Jre Version 1.4.2
Sun ≫ Jre Version 1.4.2 Update update16
Sun ≫ Jre Version 1.4.2 Update update17
Sun ≫ Jre Version 1.4.2 Update update18
Sun ≫ Jre Version 1.4.2 Update update19
Sun ≫ Jre Version 1.4.2 Update update20
Sun ≫ Jre Version 1.4.2_1
Sun ≫ Jre Version 1.4.2_2
Sun ≫ Jre Version 1.4.2_3
Sun ≫ Jre Version 1.4.2_4
Sun ≫ Jre Version 1.4.2_5
Sun ≫ Jre Version 1.4.2_6
Sun ≫ Jre Version 1.4.2_7
Sun ≫ Jre Version 1.4.2_8
Sun ≫ Jre Version 1.4.2_9
Sun ≫ Jre Version 1.4.2_10
Sun ≫ Jre Version 1.4.2_11
Sun ≫ Jre Version 1.4.2_12
Sun ≫ Jre Version 1.4.2_13
Sun ≫ Jre Version 1.4.2_14
Sun ≫ Jre Version 1.4.2_15
Sun ≫ Sdk Version <= 1.4.2_21
Sun ≫ Sdk Version 1.4.0
Sun ≫ Sdk Version 1.4.0_01
Sun ≫ Sdk Version 1.4.0_02
Sun ≫ Sdk Version 1.4.0_03
Sun ≫ Sdk Version 1.4.0_04
Sun ≫ Sdk Version 1.4.1
Sun ≫ Sdk Version 1.4.1_01
Sun ≫ Sdk Version 1.4.1_02
Sun ≫ Sdk Version 1.4.1_03
Sun ≫ Sdk Version 1.4.1_04
Sun ≫ Sdk Version 1.4.1_05
Sun ≫ Sdk Version 1.4.1_06
Sun ≫ Sdk Version 1.4.1_07
Sun ≫ Sdk Version 1.4.2
Sun ≫ Sdk Version 1.4.2_1
Sun ≫ Sdk Version 1.4.2_2
Sun ≫ Sdk Version 1.4.2_3
Sun ≫ Sdk Version 1.4.2_4
Sun ≫ Sdk Version 1.4.2_5
Sun ≫ Sdk Version 1.4.2_6
Sun ≫ Sdk Version 1.4.2_7
Sun ≫ Sdk Version 1.4.2_8
Sun ≫ Sdk Version 1.4.2_9
Sun ≫ Sdk Version 1.4.2_10
Sun ≫ Sdk Version 1.4.2_11
Sun ≫ Sdk Version 1.4.2_12
Sun ≫ Sdk Version 1.4.2_13
Sun ≫ Sdk Version 1.4.2_14
Sun ≫ Sdk Version 1.4.2_15
Sun ≫ Sdk Version 1.4.2_16
Sun ≫ Sdk Version 1.4.2_17
Sun ≫ Sdk Version 1.4.2_18
Sun ≫ Sdk Version 1.4.2_19
Sun ≫ Sdk Version 1.4.2_20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.65% 0.881
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/507985/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
http://www.vupen.com/english/advisories/2009/3316
Vendor Advisory
http://secunia.com/advisories/37460
Vendor Advisory
http://secunia.com/advisories/37386
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200911-02.xml
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html
http://marc.info/?l=bugtraq&m=125787273209737&w=2
http://secunia.com/advisories/36176
Vendor Advisory
http://secunia.com/advisories/37300
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
http://www.us-cert.gov/cas/techalerts/TA09-294A.html
US Government Resource
https://rhn.redhat.com/errata/RHSA-2009-1200.html
http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html
http://secunia.com/advisories/36199
Vendor Advisory
http://secunia.com/advisories/36248
Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2009-1199.html
http://osvdb.org/56789
http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1
Patch
Vendor Advisory
http://www.securityfocus.com/bid/35946
http://www.securitytracker.com/id?1022657
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8453