CVE-2009-2724

Published: Aug 10, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks."

Affected (1)

Products: Sun: Java Se

Sun

1 product

Java Se

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sun Java Se	Up to 5.0

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (16)

http://java.sun.com/j2se/1.5.0/ReleaseNotes.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/37386

Source: cve@mitre.org

http://secunia.com/advisories/37460

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200911-02.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

http://java.sun.com/j2se/1.5.0/ReleaseNotes.html