GCVE - cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*

part: a version: * update: update_12

Vendor	Sun (`f793a52f-9733-5503-ba70-29fa391cdd2b`)
Product	Jre (`ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1101`	vulnerable	2026-06-08 04:51:13.121641	Details available Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak." Published: 2009-03-25T23:00:00.000Z Updated: 2024-08-07T04:57:17.730Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 http://secunia.com/advisories/34632 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 http://secunia.com/advisories/35156	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1100`	vulnerable	2026-06-08 04:51:13.120142	Details available Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886. Published: 2009-03-25T23:00:00.000Z Updated: 2024-08-07T04:57:17.691Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 http://secunia.com/advisories/35156 http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html http://secunia.com/advisories/35776	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1098`	vulnerable	2026-06-08 04:51:13.092233	Details available Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998. Published: 2009-03-25T23:00:00.000Z Updated: 2024-08-07T04:57:17.770Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 http://secunia.com/advisories/34632 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 http://secunia.com/advisories/35156	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1097`	vulnerable	2026-06-08 04:51:13.090009	Details available Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997. Published: 2009-03-25T23:00:00.000Z Updated: 2024-08-07T04:57:17.819Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 http://secunia.com/advisories/34632 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 http://secunia.com/advisories/35156	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1096`	vulnerable	2026-06-08 04:51:13.088730	Details available Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers. Published: 2009-03-25T23:00:00.000Z Updated: 2024-08-07T04:57:17.714Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 http://secunia.com/advisories/34632 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1095`	vulnerable	2026-06-08 04:51:13.086578	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1094`	vulnerable	2026-06-08 04:51:13.063415	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1093`	vulnerable	2026-06-08 04:51:12.995616	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.