CVE-2009-1102

Published: Mar 25, 2009Modified: Apr 23, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."

Affected (1)

Products: Sun: Java

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sun Java	All versions

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (54)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=124344236532162&w=2

Source: cve@mitre.org

http://secunia.com/advisories/34489

Source: cve@mitre.org

http://secunia.com/advisories/34496

Source: cve@mitre.org

http://secunia.com/advisories/34632

Source: cve@mitre.org

http://secunia.com/advisories/35223

Source: cve@mitre.org

http://secunia.com/advisories/35255

Source: cve@mitre.org

http://secunia.com/advisories/37386

Source: cve@mitre.org

http://secunia.com/advisories/37460

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200911-02.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-254610-1

Source: cve@mitre.org

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:137

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:162

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0392.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/34240

Source: cve@mitre.org

http://www.securitytracker.com/id?1021919

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-748-1

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1426

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10300

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6722

Source: cve@mitre.org

https://rhn.redhat.com/errata/RHSA-2009-0377.html

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=124344236532162&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34489

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34496

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34632

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35223

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35255

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37386

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37460

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200911-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-66-254610-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:137

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:162

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0392.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34240

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021919

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-748-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/1426

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3316

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10300

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6722

Source: af854a3a-2127-422b-91ae-364da2661108

https://rhn.redhat.com/errata/RHSA-2009-0377.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.