Descriptions du CVE

Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow.

Informations du CVE

Faiblesses connexes

CWE-ID	Nom de la faiblesse	Source
CWE-189	Category : Numeric Errors Weaknesses in this category are related to improper calculation or conversion of numbers.

Métriques

Métriques	Score	Gravité	CVSS Vecteur	Source
V2	7.5		AV:N/AC:L/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS est un modèle de notation qui prédit la probabilité qu'une vulnérabilité soit exploitée.

Score EPSS

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Percentile EPSS

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Sun>>Java_runtime_environment >> Version 5.0

Sun>>Java_runtime_environment >> Version 6.0

Sun>>Java_se_development_kit >> Version *

Références

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5726
Tags : vdb-entry, signature, x_refsource_OVAL

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/35156
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/35776
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id?1021913
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/37460
Tags : third-party-advisory, x_refsource_SECUNIA

http://security.gentoo.org/glsa/glsa-200911-02.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.redhat.com/support/errata/RHSA-2009-1038.html
Tags : vendor-advisory, x_refsource_REDHAT

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777
Tags : third-party-advisory, x_refsource_IDEFENSE

https://rhn.redhat.com/errata/RHSA-2009-1198.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vmware.com/security/advisories/VMSA-2009-0016.html
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=124344236532162&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.redhat.com/support/errata/RHSA-2009-0394.html
Tags : vendor-advisory, x_refsource_REDHAT

http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://secunia.com/advisories/34495
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/36185
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/35255
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2009/1426
Tags : vdb-entry, x_refsource_VUPEN

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/archive/1/507985/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
Tags : x_refsource_CONFIRM

http://www.redhat.com/support/errata/RHSA-2009-0392.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/35223
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/34240
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/34496
Tags : third-party-advisory, x_refsource_SECUNIA

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/35416
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1
Tags : x_refsource_MISC

http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/37386
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.vupen.com/english/advisories/2009/3316
Tags : vdb-entry, x_refsource_VUPEN

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	12.25%	–	–
2022-03-20	–	–	12.25%	–	–
2022-04-03	–	–	12.25%	–	–
2023-03-12	–	–	–	73.43%	–
2023-07-02	–	–	–	74.2%	–
2023-08-13	–	–	–	68.68%	–
2023-09-24	–	–	–	66.77%	–
2024-06-02	–	–	–	66.77%	–
2024-09-01	–	–	–	70.48%	–
2024-12-22	–	–	–	58.24%	–
2025-01-19	–	–	–	58.24%	–
2025-03-18	–	–	–	–	7.79%
2025-04-22	–	–	–	–	12.78%
2025-07-01	–	–	–	–	5.38%
2025-11-18	–	–	–	–	5.38%
2025-11-21	–	–	–	–	5.38%
2026-05-17	–	–	–	–	4.12%

Date	Percentile
2022-02-06	89%
2022-03-20	9%
2022-04-03	95%
2023-03-12	98%
2023-07-02	98%
2023-08-13	98%
2023-09-24	98%
2024-06-02	98%
2024-09-01	98%
2024-12-22	98%
2025-01-19	98%
2025-03-18	91%
2025-04-22	94%
2025-07-01	9%
2025-11-18	89%
2025-11-21	9%
2026-05-17	89%

CVE-2009-1099 : Détail

CVE-2009-1099