Security Advisory

CVE-2009-2674

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-08-05 19:00:00
Last updated 2024-08-07 05:59:56
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.