CVE-2009-2689: Critical severity java vulnerability
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2689?
CVE-2009-2689 has a high severity rating due to its potential to allow unauthorized access to sensitive resources.
How do I fix CVE-2009-2689?
To fix CVE-2009-2689, update to the latest version of Sun Java SE or OpenJDK that addresses this vulnerability.
Which versions are affected by CVE-2009-2689?
CVE-2009-2689 affects Sun Java SE 5.0 before Update 20 and 6 before Update 15, along with OpenJDK.
Can CVE-2009-2689 be exploited through applets?
Yes, CVE-2009-2689 allows context-dependent attackers to exploit the vulnerability via untrusted applets or applications.
What type of access does CVE-2009-2689 allow an attacker to gain?
CVE-2009-2689 allows attackers to bypass intended access restrictions, granting full privileges to certain object instances.