Unscored severity · published Aug 10, 2009
CVE-2009-2723
Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262
–
CVSS
2.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java SE · Sun
through 5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2723
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2723
Patch
http://java.sun.com/j2se/1.5.0/ReleaseNotes.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
secunia.com
http://secunia.com/advisories/37386
secunia.com
http://secunia.com/advisories/37460
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200911-02.xml
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1
More from Java SE
–
CVE-2009-2724
Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks."
–
CVE-2009-2722
Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594
–
CVE-2009-2721
Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003
–
CVE-2009-2720
Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent…
–
CVE-2009-2719
The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException) via a crafted .jnlp…