CVE-2009-2674 PUBLISHED CVSS 7.5 HIGH

Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.

EPSS 3.98% · 88.3th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
3.98%
88.3th percentile

Affected Products

VendorProductVersions
n/an/an/a
sunjre6, 6, 6
sunjdk6, 1.6.0, 6

Timeline

References

…and 8 more

Open in Interactive Console →