CVE-2009-2716

5 documents5 sources
Severity
7.5HIGH
EPSS
0.3%
top 46.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java SE
Timeline
PublishedAug 10
Latest updateMay 2

Description

The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-w6rq-x735-2wv9: The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to↗2022-05-02
▶
CVEList
CVE-2009-2716: The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to↗2009-08-10
▶

📋Vendor Advisories

1
Red Hat
JDK improper version selection↗2009-08-11
▶

💬Community

1
Bugzilla
CVE-2009-2716 JDK improper version selection↗2009-08-11
▶