Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*

part: a version: 5.0 update: update_9

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJdk (86ca1592-c9ed-54c6-9315-e1ffda84ce5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2675 vulnerable 2026-06-08 04:51:29.873115 Details available
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:57.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2673 vulnerable 2026-06-08 04:51:29.852945 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2672 vulnerable 2026-06-08 04:51:29.850916 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2671 vulnerable 2026-06-08 04:51:29.848835 Details available
The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2670 vulnerable 2026-06-08 04:51:29.819727 Details available
The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5356 vulnerable 2026-06-08 04:50:51.074021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5355 vulnerable 2026-06-08 04:50:51.069650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5354 vulnerable 2026-06-08 04:50:51.066591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5353 vulnerable 2026-06-08 04:50:51.062635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5351 vulnerable 2026-06-08 04:50:51.057408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5350 vulnerable 2026-06-08 04:50:51.054601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5348 vulnerable 2026-06-08 04:50:51.050311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5344 vulnerable 2026-06-08 04:50:50.916494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5343 vulnerable 2026-06-08 04:50:50.913686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5342 vulnerable 2026-06-08 04:50:50.911061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5341 vulnerable 2026-06-08 04:50:50.908324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5340 vulnerable 2026-06-08 04:50:50.905627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5339 vulnerable 2026-06-08 04:50:50.866939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3115 vulnerable 2026-06-08 04:50:33.171724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3114 vulnerable 2026-06-08 04:50:33.169815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3113 vulnerable 2026-06-08 04:50:33.167596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3112 vulnerable 2026-06-08 04:50:33.165261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3111 vulnerable 2026-06-08 04:50:33.157014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3107 vulnerable 2026-06-08 04:50:33.100036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3106 vulnerable 2026-06-08 04:50:33.098370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3104 vulnerable 2026-06-08 04:50:33.053827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3103 vulnerable 2026-06-08 04:50:33.038287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2086 vulnerable 2026-06-08 04:50:22.879978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1187 vulnerable 2026-06-08 04:50:19.501256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.