Approved changes feed: RSS · Atom
cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*
part: a version: 6 update: update_13
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Jre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2674 |
vulnerable | 2026-06-08 04:51:29.871656 |
Details available
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.647Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1672 |
vulnerable | 2026-06-08 04:51:24.356712 |
Details available
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method.
Published: 2009-05-18T18:00:00.000Z
Updated: 2024-08-07T05:20:35.173Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1671 |
vulnerable | 2026-06-08 04:51:24.356306 |
Details available
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, or (5) launch method.
Published: 2009-05-18T18:00:00.000Z
Updated: 2024-08-07T05:20:35.056Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.