Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2676

EPSS 17.79% · P95
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2676

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sun JNLPAppletLauncher库任意文件创建漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
JNLPAppletLauncher是一个基于JNLP的applet启动器类，允许applet使用Java 3D、JOGL、JOAL等扩展。 JNLPAppletLauncher中的安全漏洞可能影响Sun JDK和JRE用户。不可信任的Java Applet可能导致旧版的JNLPAppletLauncher向下载和运行不可信任的applet用户的系统上写入任意文件。出现这个漏洞时用户会看到警告对话框说明数字签名已过期。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2676

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2676

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-08-05 · 16 CVEs total

CVE-2008-6897Andres_Garcia Getleft HTML标记 多个缓冲区溢出漏洞
CVE-2008-6898Saschart SasCam Webcam Server ActiveX控件Get方式缓冲区溢出漏洞
CVE-2008-6899freeSSHd SFTP指令 多个远程缓冲区溢出漏洞
CVE-2009-2579CS-Cart 'reward_points.post.php' SQL注入漏洞
CVE-2009-2667ibm tklm 未明漏洞
CVE-2009-2668microsoft internet_explorer 资源管理错误漏洞
CVE-2009-2669IBM AIX libC XL C++运行时库本地权限提升漏洞
CVE-2009-2670Sun Java运行时环境音频系统信息泄露漏洞
CVE-2009-2671Sun Java运行时环境代理机制 信息泄露漏洞
CVE-2009-2672Sun Java运行时环境代理机制 会话固定漏洞
CVE-2009-2673Sun Java运行时环境代理机制 权限提升漏洞
CVE-2009-2674Sun Java运行时环境JPEG图形解析整数溢出漏洞
CVE-2009-2675Sun Java运行时环境Unpack200 JAR解压工具整数溢出漏洞
CVE-2009-2687PHP 输入验证错误漏洞
CVE-2009-2688XEmacs图形文件处理多个整数溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2676

No comments yet

Leave a comment