CVE-2009-2676

Sun Java SE/JRE <6.14 - RCE

Title source: llm

Description

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.

References (23)

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html

[Mailing List] http://marc.info/?l=bugtraq&m=125787273209737&w=2

[Third Party Advisory, VDB Entry] http://osvdb.org/56789

[Vendor Advisory] http://secunia.com/advisories/36176

[Vendor Advisory] http://secunia.com/advisories/36199

[Vendor Advisory] http://secunia.com/advisories/36248

[Vendor Advisory] http://secunia.com/advisories/37300

[Vendor Advisory] http://secunia.com/advisories/37386

[Vendor Advisory] http://secunia.com/advisories/37460

[Patch] http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1

[Patch, Vendor Advisory] http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1

[Vendor Advisory] http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/507985/100/0/threaded

[US Government Resource] http://www.us-cert.gov/cas/techalerts/TA09-294A.html

[Vendor Advisory] http://www.vupen.com/english/advisories/2009/3316

[Vendor Advisory] https://rhn.redhat.com/errata/RHSA-2009-1199.html

[Vendor Advisory] https://rhn.redhat.com/errata/RHSA-2009-1200.html

[Vendor Advisory] http://www.vmware.com/security/advisories/VMSA-2009-0016.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/35946

... and 3 more

Scores

EPSS 0.1422

EPSS Percentile 94.3%

Classification

Status draft

Affected Products (50)

sun/java_se

sun/java_se

sun/jdk < 1.5.0

sun/jdk < 1.6.0

sun/jdk

sun/jdk

sun/jdk

sun/jdk

sun/jdk

sun/jdk

sun/jdk

sun/jdk

sun/jdk

sun/jdk

sun/jdk

... and 35 more

Timeline

Published Aug 05, 2009

Tracked Since Feb 18, 2026