Descrições CVE

Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow.

Informações CVE

Fraquezas Relacionadas

CWE-ID	Nome da Fraqueza	Source
CWE-189	Category : Numeric Errors Weaknesses in this category are related to improper calculation or conversion of numbers.

Métricas

Métricas	Pontuação	Gravidade	CVSS Vetor	Source
V2	7.5		AV:N/AC:L/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

O EPSS é um modelo de pontuação que prevê a probabilidade de uma vulnerabilidade ser explorada.

Pontuação EPSS

O modelo EPSS produz uma pontuação de probabilidade entre 0 e 1 (0 e 100%). Quanto maior a pontuação, maior a probabilidade de uma vulnerabilidade ser explorada.

Percentil EPSS

O percentil é usado para classificar os CVEs de acordo com sua pontuação EPSS. Por exemplo, um CVE no percentil 95 segundo sua pontuação EPSS tem mais probabilidade de ser explorado do que 95% dos outros CVEs. Assim, o percentil é usado para comparar a pontuação EPSS de um CVE com a de outros CVEs.

EPSS First.org

Products Mentioned

Configuraton 0

Sun>>Java_runtime_environment >> Version 5.0

Sun>>Java_runtime_environment >> Version 6.0

Sun>>Java_se_development_kit >> Version *

Referências

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5726
Tags : vdb-entry, signature, x_refsource_OVAL

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/35156
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/35776
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id?1021913
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/37460
Tags : third-party-advisory, x_refsource_SECUNIA

http://security.gentoo.org/glsa/glsa-200911-02.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.redhat.com/support/errata/RHSA-2009-1038.html
Tags : vendor-advisory, x_refsource_REDHAT

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777
Tags : third-party-advisory, x_refsource_IDEFENSE

https://rhn.redhat.com/errata/RHSA-2009-1198.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vmware.com/security/advisories/VMSA-2009-0016.html
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=124344236532162&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.redhat.com/support/errata/RHSA-2009-0394.html
Tags : vendor-advisory, x_refsource_REDHAT

http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://secunia.com/advisories/34495
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/36185
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/35255
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2009/1426
Tags : vdb-entry, x_refsource_VUPEN

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/archive/1/507985/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
Tags : x_refsource_CONFIRM

http://www.redhat.com/support/errata/RHSA-2009-0392.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/35223
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/34240
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/34496
Tags : third-party-advisory, x_refsource_SECUNIA

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/35416
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1
Tags : x_refsource_MISC

http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/37386
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.vupen.com/english/advisories/2009/3316
Tags : vdb-entry, x_refsource_VUPEN

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	12.25%	–	–
2022-03-20	–	–	12.25%	–	–
2022-04-03	–	–	12.25%	–	–
2023-03-12	–	–	–	73.43%	–
2023-07-02	–	–	–	74.2%	–
2023-08-13	–	–	–	68.68%	–
2023-09-24	–	–	–	66.77%	–
2024-06-02	–	–	–	66.77%	–
2024-09-01	–	–	–	70.48%	–
2024-12-22	–	–	–	58.24%	–
2025-01-19	–	–	–	58.24%	–
2025-03-18	–	–	–	–	7.79%
2025-04-22	–	–	–	–	12.78%
2025-07-01	–	–	–	–	5.38%
2025-11-18	–	–	–	–	5.38%
2025-11-21	–	–	–	–	5.38%
2026-05-17	–	–	–	–	4.12%

Date	Percentile
2022-02-06	89%
2022-03-20	9%
2022-04-03	95%
2023-03-12	98%
2023-07-02	98%
2023-08-13	98%
2023-09-24	98%
2024-06-02	98%
2024-09-01	98%
2024-12-22	98%
2025-01-19	98%
2025-03-18	91%
2025-04-22	94%
2025-07-01	9%
2025-11-18	89%
2025-11-21	9%
2026-05-17	89%

CVE-2009-1099 : Detalhe

CVE-2009-1099