CVE-2009-2674
Status: ModifiedHigh (7.5)—
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Base score: 7.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 6.39%
- Percentile among all scored CVEs: 94
- Score date: 10/12/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- CWE-264
References
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html
- http://marc.info/?l=bugtraq&m=125787273209737&w=2
- http://secunia.com/advisories/36162
- http://secunia.com/advisories/36176
- http://secunia.com/advisories/36180
- http://secunia.com/advisories/36248
- http://secunia.com/advisories/37300
- http://secunia.com/advisories/37386
- http://security.gentoo.org/glsa/glsa-200911-02.xml
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:209
- http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
- http://www.us-cert.gov/cas/techalerts/TA09-294A.html
- http://www.vupen.com/english/advisories/2009/2543
- http://www.zerodayinitiative.com/advisories/ZDI-09-050/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52339
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073
- https://rhn.redhat.com/errata/RHSA-2009-1200.html
- https://rhn.redhat.com/errata/RHSA-2009-1201.html
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html
- http://marc.info/?l=bugtraq&m=125787273209737&w=2
- http://secunia.com/advisories/36162
- http://secunia.com/advisories/36176
- http://secunia.com/advisories/36180
- http://secunia.com/advisories/36248
- http://secunia.com/advisories/37300
- http://secunia.com/advisories/37386
- http://security.gentoo.org/glsa/glsa-200911-02.xml
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:209
- http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
- http://www.us-cert.gov/cas/techalerts/TA09-294A.html
- http://www.vupen.com/english/advisories/2009/2543
- http://www.zerodayinitiative.com/advisories/ZDI-09-050/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52339
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073
- https://rhn.redhat.com/errata/RHSA-2009-1200.html
- https://rhn.redhat.com/errata/RHSA-2009-1201.html
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html
Raw JSON (NVD)
Show
{
"id": "CVE-2009-2674",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-08-05T19:30:01.267",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/36162",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/36176",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/36180",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/36248",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/37300",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/37386",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml",
"source": "cve@mitre.org"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
"source": "cve@mitre.org"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2009/2543",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-09-050/",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52339",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073",
"source": "cve@mitre.org"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
"source": "cve@mitre.org"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
"source": "cve@mitre.org"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
"source": "cve@mitre.org"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/36162",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/36176",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/36180",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/36248",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/37300",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/37386",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2009/2543",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-09-050/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52339",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow."
},
{
"lang": "es",
"value": "Un desbordamiento de enteros en el archivo javaws.exe en Sun Java Web Start en Sun Java Runtime Environment (JRE) en JDK y JRE versión 6 anterior a Update 15, permite a los atacantes dependiendo del contexto ejecutar código arbitrario por medio de una imagen JPEG creada que no se maneja apropiadamente durante la visualización de una imagen de bienvenida, que desencadena un desbordamiento de búfer basado en la región heap de la memoria."
}
],
"lastModified": "2026-06-16T23:09:58.877",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA89349B-834C-42D0-84C6-CA73CE1F8B26"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7865369-9DE6-4C20-ACD2-CCC14ED54701"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8614E7A0-091C-4080-89FA-B2C7609B4AD7"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67E0818A-3675-4293-89FE-5001E36C0F38"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95112B98-B6B2-43FA-BF76-F518649CF3BE"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A18341A-3688-48E7-95AD-283EC9C95B4A"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E301C59A-47F5-4861-9091-D0002CBA5B7A"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCD4F889-710C-43C5-85DD-70E96F8FE313"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED195051-AAC7-4EE1-B936-18D1C8AD2498"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44146DF6-F368-4F17-B379-34194873D80F"
},
{
"criteria": "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BA9E6CD-F43F-487D-9638-406B72D51471"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26826BB7-0EF6-439B-87F4-5BCCEA3A8907"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDC09958-5286-4C16-AB6F-63B4BDD902B3"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82C6F76F-68FD-4794-9182-935D85910C1F"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6314C9DF-9421-445D-ABCC-79EDCED23156"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"
},
{
"criteria": "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "119B72FA-8B85-4D1F-8A14-5B07204DAED5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}