Description
Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.
Affected products
- sun / java_se
- sun / java_se
- sun / jdk1.5.0
- sun / jdk1.6.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.5.0 – 1.5.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jdk1.6.0 – 1.6.0
- sun / jre1.5.0
- sun / jre1.6.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.5.0 – 1.5.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.6.0 – 1.6.0
- sun / jre1.4.2_21
- sun / jre1.4.0 – 1.4.0
- sun / jre1.4.0_01 – 1.4.0_01
- sun / jre1.4.0_02 – 1.4.0_02
- sun / jre1.4.0_03 – 1.4.0_03
- sun / jre1.4.0_04 – 1.4.0_04
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.1 – 1.4.1
- sun / jre1.4.2 – 1.4.2
- sun / jre1.4.2 – 1.4.2
- sun / jre1.4.2 – 1.4.2
- sun / jre1.4.2 – 1.4.2
- sun / jre1.4.2 – 1.4.2
- sun / jre1.4.2 – 1.4.2
- sun / jre1.4.2_1 – 1.4.2_1
- sun / jre1.4.2_2 – 1.4.2_2
- sun / jre1.4.2_3 – 1.4.2_3
- sun / jre1.4.2_4 – 1.4.2_4
- sun / jre1.4.2_5 – 1.4.2_5
- sun / jre1.4.2_6 – 1.4.2_6
- sun / jre1.4.2_7 – 1.4.2_7
- sun / jre1.4.2_8 – 1.4.2_8
- sun / jre1.4.2_9 – 1.4.2_9
- sun / jre1.4.2_10 – 1.4.2_10
- sun / jre1.4.2_11 – 1.4.2_11
- sun / jre1.4.2_12 – 1.4.2_12
- sun / jre1.4.2_13 – 1.4.2_13
- sun / jre1.4.2_14 – 1.4.2_14
- sun / jre1.4.2_15 – 1.4.2_15
- sun / sdk1.4.2_21
- sun / sdk1.4.0 – 1.4.0
- sun / sdk1.4.0_01 – 1.4.0_01
- sun / sdk1.4.0_02 – 1.4.0_02
- sun / sdk1.4.0_03 – 1.4.0_03
- sun / sdk1.4.0_04 – 1.4.0_04
- sun / sdk1.4.1 – 1.4.1
- sun / sdk1.4.1_01 – 1.4.1_01
- sun / sdk1.4.1_02 – 1.4.1_02
- sun / sdk1.4.1_03 – 1.4.1_03
- sun / sdk1.4.1_04 – 1.4.1_04
- sun / sdk1.4.1_05 – 1.4.1_05
- sun / sdk1.4.1_06 – 1.4.1_06
- sun / sdk1.4.1_07 – 1.4.1_07
- sun / sdk1.4.2 – 1.4.2
- sun / sdk1.4.2_1 – 1.4.2_1
- sun / sdk1.4.2_2 – 1.4.2_2
- sun / sdk1.4.2_3 – 1.4.2_3
- sun / sdk1.4.2_4 – 1.4.2_4
- sun / sdk1.4.2_5 – 1.4.2_5
- sun / sdk1.4.2_6 – 1.4.2_6
- sun / sdk1.4.2_7 – 1.4.2_7
- sun / sdk1.4.2_8 – 1.4.2_8
- sun / sdk1.4.2_9 – 1.4.2_9
- sun / sdk1.4.2_10 – 1.4.2_10
- sun / sdk1.4.2_11 – 1.4.2_11
- sun / sdk1.4.2_12 – 1.4.2_12
- sun / sdk1.4.2_13 – 1.4.2_13
- sun / sdk1.4.2_14 – 1.4.2_14
- sun / sdk1.4.2_15 – 1.4.2_15
- sun / sdk1.4.2_16 – 1.4.2_16
- sun / sdk1.4.2_17 – 1.4.2_17
- sun / sdk1.4.2_18 – 1.4.2_18
- sun / sdk1.4.2_19 – 1.4.2_19
- sun / sdk1.4.2_20 – 1.4.2_20
References
- MISChttps://rhn.redhat.com/errata/RHSA-2009-1200.html
- MISChttps://rhn.redhat.com/errata/RHSA-2009-1199.html
- MISChttp://osvdb.org/56789
- VENDOR_ADVISORYhttp://secunia.com/advisories/37460
- MISChttp://www.securitytracker.com/id?1022657
- MISChttp://security.gentoo.org/glsa/glsa-200911-02.xml
- VENDOR_ADVISORYhttp://www.vmware.com/security/advisories/VMSA-2009-0016.html
- MAILING_LISThttp://marc.info/?l=bugtraq&m=125787273209737&w=2
- VENDOR_ADVISORYhttp://secunia.com/advisories/36199
- VENDOR_ADVISORYhttp://secunia.com/advisories/36248
- MISChttp://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1
- MAILING_LISThttp://marc.info/?l=bugtraq&m=125787273209737&w=2
- MISChttp://www.securityfocus.com/archive/1/507985/100/0/threaded
- MISChttp://www.us-cert.gov/cas/techalerts/TA09-294A.html
- MISChttp://www.securityfocus.com/bid/35946
- VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
- MISChttp://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1
- VENDOR_ADVISORYhttp://secunia.com/advisories/36176
- VENDOR_ADVISORYhttp://secunia.com/advisories/37300
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/37386
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8453
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2009/3316