CVE-2009-2205

Published: Sep 9, 2009Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Affected (28)

Products: Apple: Mac Os X, Mac Os X Server, Java 1.4, Java 1.5, Java 1.6

5 products

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.5.0
Apple Mac Os X	Version 10.5.1
Apple Mac Os X	Version 10.5.2
Apple Mac Os X	Version 10.5.2 2008-002
Apple Mac Os X	Version 10.5.3
Apple Mac Os X	Version 10.5.4
Apple Mac Os X	Version 10.5.5
Apple Mac Os X	Version 10.5.6
Apple Mac Os X	Version 10.5.7
Apple Mac Os X	Version 10.5
Apple Mac Os X Server	Version 10.5.0
Apple Mac Os X Server	Version 10.5.1
Apple Mac Os X Server	Version 10.5.2
Apple Mac Os X Server	Version 10.5.3
Apple Mac Os X Server	Version 10.5.4
Apple Mac Os X Server	Version 10.5.5
Apple Mac Os X Server	Version 10.5.6
Apple Mac Os X Server	Version 10.5.7
Apple Mac Os X Server	Version 10.5

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Apple Java 1.4	Up to 2
Apple Java 1.4	Version 2
Apple Java 1.4	Version 2 16
Apple Java 1.4	Version 2 18
Apple Java 1.5	Up to 0
Apple Java 1.6	Up to 0
Apple Java 1.6	Version 0
Apple Java 1.6	Version 0 05
Apple Java 1.6	Version 0 07