CVE-2009-2719
10.08.2009, 20:30
The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException) via a crafted .jnlp file, as demonstrated by the jnlp_file/appletDesc/index.html#misc test in the Technology Compatibility Kit (TCK) for the Java Network Launching Protocol (JNLP).Enginsight
| Vendor | Product | Version |
|---|---|---|
| sun | java_se | 𝑥 ≤ 6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openjdk-6 |
| ||||||||||||||||
| sun-java5 |
| ||||||||||||||||
| sun-java6 |
|
Common Weakness Enumeration
References