| ID |
CVE-2009-1105
|
| Summary |
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.5 (as of 10-10-2018 - 19:34) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| oval
via4
|
| accepted | 2014-01-20T04:01:27.844-05:00 | | class | vulnerability | | contributors | | name | Michael Wood | | organization | Hewlett-Packard |
| name | Chris Coffin | | organization | The MITRE Corporation |
| | definition_extensions | | comment | VMware ESX Server 3.5.0 is installed | | oval | oval:org.mitre.oval:def:5887 |
| comment | VMware ESX Server 4.0 is installed | | oval | oval:org.mitre.oval:def:6293 |
| | description | The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490. | | family | unix | | id | oval:org.mitre.oval:def:6642 | | status | accepted | | submitted | 2009-11-30T15:39:02.000-04:00 | | title | Sun Java Runtime Environment Java Plug-in weak security | | version | 7 |
|
| redhat
via4
|
| advisories | | | rpms | - java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4
- java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5
- java-1.6.0-sun-demo-1:1.6.0.13-1jpp.1.el4
- java-1.6.0-sun-demo-1:1.6.0.13-1jpp.1.el5
- java-1.6.0-sun-devel-1:1.6.0.13-1jpp.1.el4
- java-1.6.0-sun-devel-1:1.6.0.13-1jpp.1.el5
- java-1.6.0-sun-jdbc-1:1.6.0.13-1jpp.1.el4
- java-1.6.0-sun-jdbc-1:1.6.0.13-1jpp.1.el5
- java-1.6.0-sun-plugin-1:1.6.0.13-1jpp.1.el4
- java-1.6.0-sun-plugin-1:1.6.0.13-1jpp.1.el5
- java-1.6.0-sun-src-1:1.6.0.13-1jpp.1.el4
- java-1.6.0-sun-src-1:1.6.0.13-1jpp.1.el5
- java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4
- java-1.5.0-ibm-accessibility-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-demo-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-demo-1:1.5.0.9-1jpp.5.el4
- java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.5.el4
- java-1.5.0-ibm-javacomm-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-javacomm-1:1.5.0.9-1jpp.5.el4
- java-1.5.0-ibm-jdbc-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-jdbc-1:1.5.0.9-1jpp.5.el4
- java-1.5.0-ibm-plugin-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-plugin-1:1.5.0.9-1jpp.5.el4
- java-1.5.0-ibm-src-1:1.5.0.9-1jpp.3.el5
- java-1.5.0-ibm-src-1:1.5.0.9-1jpp.5.el4
- java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4
- java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-accessibility-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-demo-1:1.6.0.5-1jpp.1.el4
- java-1.6.0-ibm-demo-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-devel-1:1.6.0.5-1jpp.1.el4
- java-1.6.0-ibm-devel-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-javacomm-1:1.6.0.5-1jpp.1.el4
- java-1.6.0-ibm-javacomm-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-jdbc-1:1.6.0.5-1jpp.1.el4
- java-1.6.0-ibm-jdbc-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-plugin-1:1.6.0.5-1jpp.1.el4
- java-1.6.0-ibm-plugin-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-src-1:1.6.0.5-1jpp.1.el4
- java-1.6.0-ibm-src-1:1.6.0.5-1jpp.1.el5
- java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5
- java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4
- java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.2.el5
- java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.3.el4
|
|
| refmap
via4
|
| apple | APPLE-SA-2010-05-18-1 | | bid | 34240 | | bugtraq | 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components | | confirm | | | gentoo | GLSA-200911-02 | | hp | - HPSBMA02429
- HPSBUX02429
- SSRT090058
| | sectrack | 1021920 | | secunia | - 34496
- 35156
- 35255
- 36185
- 37386
- 37460
- 39819
| | sunalert | 254611 | | suse | - SUSE-SA:2009:016
- SUSE-SA:2009:036
| | vupen | - ADV-2009-1426
- ADV-2009-3316
- ADV-2010-1191
| | xf | jre-plugin-weak-security(49458) |
|
| Last major update |
10-10-2018 - 19:34 |
| Published |
25-03-2009 - 23:30 |
| Last modified |
10-10-2018 - 19:34 |
