CVE-2009-2676 : Detail

CVE-2009-2676

3.65%V3
Network
2009-08-05
17h00 +00:00
2018-10-10
16h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE Other No informations.

Metrics

Metrics Score Severity CVSS Vector Source
V2 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Sun>>Java_se >> Version *

    Sun>>Java_se >> Version *

      Sun>>Jdk >> Version To (including) 1.5.0

      Sun>>Jdk >> Version To (including) 1.6.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.5.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jdk >> Version 1.6.0

      Sun>>Jre >> Version To (including) 1.5.0

      Sun>>Jre >> Version To (including) 1.6.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Jre >> Version 1.6.0

      Configuraton 0

      Sun>>Java_se >> Version *

        Sun>>Jre >> Version To (including) 1.4.2_21

        Sun>>Jre >> Version 1.4.0

        Sun>>Jre >> Version 1.4.0_01

        Sun>>Jre >> Version 1.4.0_02

        Sun>>Jre >> Version 1.4.0_03

        Sun>>Jre >> Version 1.4.0_04

        Sun>>Jre >> Version 1.4.1

        Sun>>Jre >> Version 1.4.1

        Sun>>Jre >> Version 1.4.1

        Sun>>Jre >> Version 1.4.1

        Sun>>Jre >> Version 1.4.1

        Sun>>Jre >> Version 1.4.1

          Sun>>Jre >> Version 1.4.1

            Sun>>Jre >> Version 1.4.1

            Sun>>Jre >> Version 1.4.2

            Sun>>Jre >> Version 1.4.2

              Sun>>Jre >> Version 1.4.2

                Sun>>Jre >> Version 1.4.2

                  Sun>>Jre >> Version 1.4.2

                  Sun>>Jre >> Version 1.4.2

                    Sun>>Jre >> Version 1.4.2_1

                    Sun>>Jre >> Version 1.4.2_2

                    Sun>>Jre >> Version 1.4.2_3

                    Sun>>Jre >> Version 1.4.2_4

                    Sun>>Jre >> Version 1.4.2_5

                    Sun>>Jre >> Version 1.4.2_6

                    Sun>>Jre >> Version 1.4.2_7

                    Sun>>Jre >> Version 1.4.2_8

                    Sun>>Jre >> Version 1.4.2_9

                    Sun>>Jre >> Version 1.4.2_10

                    Sun>>Jre >> Version 1.4.2_11

                    Sun>>Jre >> Version 1.4.2_12

                    Sun>>Jre >> Version 1.4.2_13

                    Sun>>Jre >> Version 1.4.2_14

                    Sun>>Jre >> Version 1.4.2_15

                    Sun>>Sdk >> Version To (including) 1.4.2_21

                    Sun>>Sdk >> Version 1.4.0

                    Sun>>Sdk >> Version 1.4.0_01

                    Sun>>Sdk >> Version 1.4.0_02

                    Sun>>Sdk >> Version 1.4.0_03

                    Sun>>Sdk >> Version 1.4.0_04

                    Sun>>Sdk >> Version 1.4.1

                    Sun>>Sdk >> Version 1.4.1_01

                      Sun>>Sdk >> Version 1.4.1_02

                      Sun>>Sdk >> Version 1.4.1_03

                      Sun>>Sdk >> Version 1.4.1_04

                      Sun>>Sdk >> Version 1.4.1_05

                      Sun>>Sdk >> Version 1.4.1_06

                      Sun>>Sdk >> Version 1.4.1_07

                      Sun>>Sdk >> Version 1.4.2

                      Sun>>Sdk >> Version 1.4.2_1

                      Sun>>Sdk >> Version 1.4.2_2

                      Sun>>Sdk >> Version 1.4.2_3

                      Sun>>Sdk >> Version 1.4.2_4

                      Sun>>Sdk >> Version 1.4.2_5

                      Sun>>Sdk >> Version 1.4.2_6

                      Sun>>Sdk >> Version 1.4.2_7

                      Sun>>Sdk >> Version 1.4.2_8

                      Sun>>Sdk >> Version 1.4.2_9

                      Sun>>Sdk >> Version 1.4.2_10

                      Sun>>Sdk >> Version 1.4.2_11

                      Sun>>Sdk >> Version 1.4.2_12

                      Sun>>Sdk >> Version 1.4.2_13

                      Sun>>Sdk >> Version 1.4.2_14

                      Sun>>Sdk >> Version 1.4.2_15

                      Sun>>Sdk >> Version 1.4.2_16

                      Sun>>Sdk >> Version 1.4.2_17

                      Sun>>Sdk >> Version 1.4.2_18

                      Sun>>Sdk >> Version 1.4.2_19

                      Sun>>Sdk >> Version 1.4.2_20

                      References

                      https://rhn.redhat.com/errata/RHSA-2009-1200.html
                      Tags : vendor-advisory, x_refsource_REDHAT
                      https://rhn.redhat.com/errata/RHSA-2009-1199.html
                      Tags : vendor-advisory, x_refsource_REDHAT
                      http://osvdb.org/56789
                      Tags : vdb-entry, x_refsource_OSVDB
                      http://secunia.com/advisories/37460
                      Tags : third-party-advisory, x_refsource_SECUNIA
                      http://www.securitytracker.com/id?1022657
                      Tags : vdb-entry, x_refsource_SECTRACK
                      http://security.gentoo.org/glsa/glsa-200911-02.xml
                      Tags : vendor-advisory, x_refsource_GENTOO
                      http://marc.info/?l=bugtraq&m=125787273209737&w=2
                      Tags : vendor-advisory, x_refsource_HP
                      http://secunia.com/advisories/36199
                      Tags : third-party-advisory, x_refsource_SECUNIA
                      http://secunia.com/advisories/36248
                      Tags : third-party-advisory, x_refsource_SECUNIA
                      http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1
                      Tags : vendor-advisory, x_refsource_SUNALERT
                      http://marc.info/?l=bugtraq&m=125787273209737&w=2
                      Tags : vendor-advisory, x_refsource_HP
                      http://www.us-cert.gov/cas/techalerts/TA09-294A.html
                      Tags : third-party-advisory, x_refsource_CERT
                      http://www.securityfocus.com/bid/35946
                      Tags : vdb-entry, x_refsource_BID
                      http://secunia.com/advisories/36176
                      Tags : third-party-advisory, x_refsource_SECUNIA
                      http://secunia.com/advisories/37300
                      Tags : third-party-advisory, x_refsource_SECUNIA
                      http://secunia.com/advisories/37386
                      Tags : third-party-advisory, x_refsource_SECUNIA
                      http://www.vupen.com/english/advisories/2009/3316
                      Tags : vdb-entry, x_refsource_VUPEN