CVE-2009-2690: Medium severity openjdk 1.7.0 headless vulnerability
The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2690?
CVE-2009-2690 is classified as a high-severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2009-2690?
To fix CVE-2009-2690, upgrade your Java SE environment to a version later than Update 15.
What versions of software are affected by CVE-2009-2690?
CVE-2009-2690 affects Sun Java SE 6 before Update 15 and OpenJDK implementations prior to the relevant fixes.
What type of attack does CVE-2009-2690 facilitate?
CVE-2009-2690 allows context-dependent attackers to exploit untrusted applets or applications to access private variables.
Is CVE-2009-2690 a zero-day vulnerability?
CVE-2009-2690 was reported and disclosed in 2009, but it is not currently a zero-day vulnerability as it has known fixes.