CVE-2009-2205

MEDIUM 6.8CVE-2009-2205 · Published 09/09/2009 · updated 16/06/2026

In short

CVE-2009-2205 is a MEDIUM (CVSS 6.8) vulnerability affecting java 1.4 (apple), java 1.5 (apple), java 1.6 (apple).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
java 1.4 apple	`= 2≤ 2`	No fix yet
java 1.5 apple	`≤ 0`	No fix yet
java 1.6 apple	`= 0≤ 0`	No fix yet

Description

Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

References

lists.apple.com/archives/security-announce/2009/Sep/msg00000.html · Patch
securitytracker.com/id · Patch
vupen.com/english/advisories/2009/2543

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free