Unscored severity · published Sep 9, 2009
CVE-2009-2205
Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
J1
Java 1.4 · Apple
through 2; 2; 2; 2 · source: NVD
J1
Java 1.5 · Apple
through 0 · source: NVD
J1
Java 1.6 · Apple
through 0; 0; 0; 0 · source: NVD
MO
Mac OS X · Apple
10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.2; 10.5.3; +4 more · source: NVD
MO
Mac OS X Server · Apple
10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more · source: NVD