Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*

part: a version: 5.0 update: update_12

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJdk (86ca1592-c9ed-54c6-9315-e1ffda84ce5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2675 vulnerable 2026-06-08 04:51:29.872903 Details available
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:57.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2673 vulnerable 2026-06-08 04:51:29.852734 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2672 vulnerable 2026-06-08 04:51:29.850697 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2671 vulnerable 2026-06-08 04:51:29.848615 Details available
The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2670 vulnerable 2026-06-08 04:51:29.812829 Details available
The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5356 vulnerable 2026-06-08 04:50:51.073505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5355 vulnerable 2026-06-08 04:50:51.069199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5354 vulnerable 2026-06-08 04:50:51.066383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5353 vulnerable 2026-06-08 04:50:51.062329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5352 vulnerable 2026-06-08 04:50:51.059744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5351 vulnerable 2026-06-08 04:50:51.057228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5350 vulnerable 2026-06-08 04:50:51.054415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5349 vulnerable 2026-06-08 04:50:51.052629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5348 vulnerable 2026-06-08 04:50:51.050112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5344 vulnerable 2026-06-08 04:50:50.916318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5343 vulnerable 2026-06-08 04:50:50.913510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5342 vulnerable 2026-06-08 04:50:50.910881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5341 vulnerable 2026-06-08 04:50:50.908137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5340 vulnerable 2026-06-08 04:50:50.905438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5339 vulnerable 2026-06-08 04:50:50.860665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3115 vulnerable 2026-06-08 04:50:33.171611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3114 vulnerable 2026-06-08 04:50:33.169653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3113 vulnerable 2026-06-08 04:50:33.167434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3112 vulnerable 2026-06-08 04:50:33.165091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3111 vulnerable 2026-06-08 04:50:33.153105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3107 vulnerable 2026-06-08 04:50:33.099878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3106 vulnerable 2026-06-08 04:50:33.098206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3104 vulnerable 2026-06-08 04:50:33.053655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3103 vulnerable 2026-06-08 04:50:33.033347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2086 vulnerable 2026-06-08 04:50:22.877874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1187 vulnerable 2026-06-08 04:50:19.495962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.