CVE-2009-1098 — Improper Restriction of Operations within the Bounds of a Memory Buffer in JDK

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents6 sources
Severity
9.3CRITICALNVD
EPSS
14.6%
top 5.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
SUN JDKSUN JRESUN SDK
Timeline
PublishedMar 25
Latest updateMay 2

Description

Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDsun/jdk1.5.0+3
▶NVDsun/jre1.5.0+48
▶NVDsun/sdk1.3.1_24+48

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-97w6-6433-7ccq: Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5↗2022-05-02
▶
CVEList
CVE-2009-1098: Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5↗2009-03-25
▶

📋Vendor Advisories

2
Ubuntu
OpenJDK vulnerabilities↗2009-03-26
▶
Red Hat
OpenJDK GIF processing buffer overflow vulnerability (6804998)↗2009-03-25
▶

💬Community

1
Bugzilla
CVE-2009-1098 OpenJDK GIF processing buffer overflow vulnerability (6804998)↗2009-03-13
▶
CVE-2009-1098 — SUN JDK vulnerability | cvebase