Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-1105
HistoryMar 25, 2009 - 11:30 p.m.

CVE-2009-1105

2009-03-2523:30:00
[email protected]
web.nvd.nist.gov
63
cve-2009-1105
java plug-in
jdk
jre
user-assisted
remote attackers
trusted applet
exploit
cr 6706490
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.

Affected configurations

NVD
Node
sunjava
CPENameOperatorVersion
sun:javasun javaeq*

References

Related

prion 1
veracode 1
cvelist 1
ubuntucve 1
nvd 1
redhat 4
suse 2
openvas 18
nessus 21
vmware 6
gentoo 1
prion
prion
Design/Logic Flaw
2009-03-25 23:30:00
veracode
veracode
Privilege Escalation
2020-04-10 00:37:29
cvelist
cvelist
CVE-2009-1105
2009-03-25 23:00:00
ubuntucve
ubuntucve
CVE-2009-1105
2009-03-25 00:00:00
nvd
nvd
CVE-2009-1105
2009-03-25 23:30:00
redhat
redhat
(RHSA-2009:1198) Critical: java-1.6.0-ibm security update
2009-08-06 00:00:00
(RHSA-2009:1038) Critical: java-1.5.0-ibm security update
2009-05-18 00:00:00
(RHSA-2009:0392) Critical: java-1.6.0-sun security update
2009-03-26 00:00:00
suse
suse
remote code execution in java-1_6_0-ibm
2009-07-02 21:55:23
remote code execution in Sun Java 5 and 6
2009-04-03 13:04:22
openvas
openvas
RedHat Security Advisory RHSA-2009:1198
2009-08-17 00:00:00
RedHat Security Advisory RHSA-2009:1038
2009-05-20 00:00:00
SLES11: Security update for IBM Java 1.6.0
2009-10-11 00:00:00
nessus
nessus
RHEL 4 / 5 : java-1.6.0-ibm (RHSA-2009:1198)
2009-08-24 00:00:00
SuSE 11 Security Update : IBM Java 1.6.0 (SAT Patch Number 1058)
2009-09-24 00:00:00
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2009:1038)
2009-08-24 00:00:00
vmware
vmware
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON
Related for CVE-2009-1105
prion1veracode1cvelist1ubuntucve1nvd1redhat4suse2openvas18nessus21vmware6gentoo1