QwikSec

Security Database

CVE

CWE

Training

CVE-2009-2675

Published: Aug 5, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20090804 Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability

third-party-advisory

x_refsource_IDEFENSE

vendor-advisory

x_refsource_SUNALERT

oval:org.mitre.oval:def:10840

vdb-entry

signature

x_refsource_OVAL

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_GENTOO

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_HP

jre-pak200-bo(52307)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_MANDRIVA

FEDORA-2009-8329

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_HP

20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_CERT

third-party-advisory

x_refsource_SECUNIA

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html

x_refsource_CONFIRM

http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1

x_refsource_CONFIRM

oval:org.mitre.oval:def:8415

vdb-entry

signature

x_refsource_OVAL

third-party-advisory

x_refsource_SECUNIA

FEDORA-2009-8337

vendor-advisory

x_refsource_FEDORA

SUSE-SR:2009:016

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

APPLE-SA-2009-09-03-1

vendor-advisory

x_refsource_APPLE

SUSE-SA:2009:053

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

SUSE-SA:2009:043

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

http://www.zerodayinitiative.com/advisories/ZDI-09-049/

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.