CVE-2009-2205
Estado: ModificadaMedia (6.8)—
Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.32%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- CWE-119
Referencias
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
- http://securitytracker.com/id?1022820
- http://www.vupen.com/english/advisories/2009/2543
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
- http://securitytracker.com/id?1022820
- http://www.vupen.com/english/advisories/2009/2543
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-2205",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-09-09T22:30:00.217",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1022820",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2009/2543",
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1022820",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2009/2543",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors."
},
{
"lang": "es",
"value": "Desbordamiento de búfer basado en pila en el Java Web Start Command Launcher en Java para Mac OS X v10.5 anterior a la actualización 5, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de vectores no especificados."
}
],
"lastModified": "2026-06-16T23:09:00.193",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2442D35-7484-43D8-9077-3FDF63104816"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC90AA12-DD17-4607-90CB-E342E83F20BB"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "855288F1-0242-4951-AB3F-B7AF13E21CF6"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10082781-B93E-4B84-94F2-FA9749B4D92B"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFB077A2-927B-43AF-BFD5-0E78648C9394"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20E8648C-5469-4280-A581-D4A9A41B7213"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7817232-BE3E-4655-8282-A979E5D40D3D"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77E8D614-E1EE-42F1-9E55-EA54FB500621"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C73BED9E-29FB-4965-B38F-013FFE5A9170"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADF94705-562C-4EC8-993E-1AD88F01549C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:java_1.4:*:21:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA48B4BD-D73D-406E-A2CB-40AFD586A6E0",
"versionEndIncluding": "2"
},
{
"criteria": "cpe:2.3:a:apple:java_1.4:2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D939C2B-44CB-4FFF-A3A1-AE34CF5EEC9E"
},
{
"criteria": "cpe:2.3:a:apple:java_1.4:2:16:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C456DD9A-A666-4F58-A62E-31783674B0D6"
},
{
"criteria": "cpe:2.3:a:apple:java_1.4:2:18:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5B0BBE8-D809-47D4-BE97-89DC01AAA9A1"
},
{
"criteria": "cpe:2.3:a:apple:java_1.5:*:19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BC5B357-2264-4E59-BB14-8FEFD6BC5F1E",
"versionEndIncluding": "0"
},
{
"criteria": "cpe:2.3:a:apple:java_1.6:*:13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7F07B54-7C97-46EF-8D6E-6DF25E01344C",
"versionEndIncluding": "0"
},
{
"criteria": "cpe:2.3:a:apple:java_1.6:0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3921FB86-2E5A-4756-B59F-0F093B28590A"
},
{
"criteria": "cpe:2.3:a:apple:java_1.6:0:05:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "750853B2-5D03-48D2-A6A8-6084312D1C2F"
},
{
"criteria": "cpe:2.3:a:apple:java_1.6:0:07:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E286B78C-E651-483F-8778-DE22A5197C91"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}