Approved changes feed: RSS · Atom
cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*
part: a version: * update: update_13
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Jre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2675 |
vulnerable | 2026-06-08 04:51:29.873329 |
Details available
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:57.038Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2673 |
vulnerable | 2026-06-08 04:51:29.853156 |
Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.917Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2672 |
vulnerable | 2026-06-08 04:51:29.851127 |
Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.979Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2671 |
vulnerable | 2026-06-08 04:51:29.849054 |
Details available
The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.765Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2670 |
vulnerable | 2026-06-08 04:51:29.827252 |
Details available
The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.843Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.