CVE-2009-2675
EUVD-2009-266805.08.2009, 19:30
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sun | jdk | 𝑥 ≤ 6 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jdk | 5.0 |
| sun | jre | 𝑥 ≤ 6 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
| sun | jre | 5.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openjdk-6 |
| ||||||||||||||||
| sun-java5 |
| ||||||||||||||||
| sun-java6 |
|
Common Weakness Enumeration
References