Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2675

EPSS 6.83% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2675

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sun Java运行时环境Unpack200 JAR解压工具整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Solaris系统的Java运行时环境(JRE)为JAVA应用程序提供可靠的运行环境。 JRE中负责处理Pack200压缩JAR文件的代码中存在整数溢出漏洞。在解压过程中，错误的信任了Pack200头中的一些字段用于计算堆缓冲区分配的大小。如果用户受骗访问了恶意的压缩文件或网页，就会触发这个溢出，导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2675

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2675

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-08-05 · 16 CVEs total

CVE-2008-6897Andres_Garcia Getleft HTML标记 多个缓冲区溢出漏洞
CVE-2008-6898Saschart SasCam Webcam Server ActiveX控件Get方式缓冲区溢出漏洞
CVE-2008-6899freeSSHd SFTP指令 多个远程缓冲区溢出漏洞
CVE-2009-2579CS-Cart 'reward_points.post.php' SQL注入漏洞
CVE-2009-2667ibm tklm 未明漏洞
CVE-2009-2668microsoft internet_explorer 资源管理错误漏洞
CVE-2009-2669IBM AIX libC XL C++运行时库本地权限提升漏洞
CVE-2009-2670Sun Java运行时环境音频系统信息泄露漏洞
CVE-2009-2671Sun Java运行时环境代理机制 信息泄露漏洞
CVE-2009-2672Sun Java运行时环境代理机制 会话固定漏洞
CVE-2009-2673Sun Java运行时环境代理机制 权限提升漏洞
CVE-2009-2674Sun Java运行时环境JPEG图形解析整数溢出漏洞
CVE-2009-2676Sun JNLPAppletLauncher库任意文件创建漏洞
CVE-2009-2687PHP 输入验证错误漏洞
CVE-2009-2688XEmacs图形文件处理多个整数溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2675

No comments yet

Leave a comment