Patchwire CVEs, their patch status, and feeds to follow them

CVE-2009-2672

Fixed in a distro release EPSS 5%

The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.

Published 2009-08-05 · CVE record · OSV

Products: sun jdk, sun jre

Distro releases

ReleasePackageFixed in
Chainguardopenjdk-11-openj90.59.0-r2
Chainguardopenjdk-11-openj9-dbg0.59.0-r2
Chainguardopenjdk-11-openj9-default-jdk0.59.0-r2
Chainguardopenjdk-11-openj9-default-jvm0.59.0-r2
Chainguardopenjdk-11-openj9-doc0.59.0-r2
Chainguardopenjdk-11-openj9-jmods0.59.0-r2
Chainguardopenjdk-11-openj9-jre0.59.0-r2
Chainguardopenjdk-17-openj90.59.0-r1
Chainguardopenjdk-17-openj9-dbg0.59.0-r1
Chainguardopenjdk-17-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-17-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-17-openj9-doc0.59.0-r1
Chainguardopenjdk-17-openj9-jmods0.59.0-r1
Chainguardopenjdk-17-openj9-jre0.59.0-r1
Chainguardopenjdk-21-openj90.59.0-r1
Chainguardopenjdk-21-openj9-dbg0.59.0-r1
Chainguardopenjdk-21-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-21-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-21-openj9-doc0.59.0-r1
Chainguardopenjdk-21-openj9-jmods0.59.0-r1
Chainguardopenjdk-21-openj9-jre0.59.0-r1
Chainguardopenjdk-25-openj90.59.0-r1
Chainguardopenjdk-25-openj9-dbg0.59.0-r1
Chainguardopenjdk-25-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-25-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-25-openj9-jmods0.59.0-r1
Chainguardopenjdk-25-openj9-jre0.59.0-r1
Chainguardopenjdk-26-openj90.59.0-r1
Chainguardopenjdk-26-openj9-dbg0.59.0-r1
Chainguardopenjdk-26-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-26-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-26-openj9-jmods0.59.0-r1
Chainguardopenjdk-26-openj9-jre0.59.0-r1
Chainguardopenjdk-8-openj90.59.0-r1
Chainguardopenjdk-8-openj9-dbg0.59.0-r1
Chainguardopenjdk-8-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-8-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-8-openj9-doc0.59.0-r1
Chainguardopenjdk-8-openj9-jre0.59.0-r1
Red Hat Enterprise Linux 5java-1.6.0-openjdk1:1.6.0.0-1.2.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-debuginfo1:1.6.0.0-1.2.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-demo1:1.6.0.0-1.2.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-devel1:1.6.0.0-1.2.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-javadoc1:1.6.0.0-1.2.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-src1:1.6.0.0-1.2.b09.el5
Red Hat network satellite 5.1java-1.5.0-sun0:1.5.0.22-1jpp.1.el4
Red Hat network satellite 5.1java-1.5.0-sun-devel0:1.5.0.22-1jpp.1.el4
Red Hat network satellite 5.3java-1.6.0-ibm1:1.6.0.7-1jpp.2.el5
Red Hat network satellite 5.3java-1.6.0-ibm1:1.6.0.7-1jpp.3.el4
Red Hat network satellite 5.3java-1.6.0-ibm-devel1:1.6.0.7-1jpp.2.el5
Red Hat network satellite 5.3java-1.6.0-ibm-devel1:1.6.0.7-1jpp.3.el4
Red Hat rhel extras 4java-1.5.0-ibm1:1.5.0.10-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-demo1:1.5.0.10-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-devel1:1.5.0.10-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-javacomm1:1.5.0.10-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-jdbc1:1.5.0.10-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-plugin1:1.5.0.10-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-src1:1.5.0.10-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-sun0:1.5.0.20-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-demo0:1.5.0.20-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-devel0:1.5.0.20-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-jdbc0:1.5.0.20-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-plugin0:1.5.0.20-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-src0:1.5.0.20-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-ibm1:1.6.0.6-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-demo1:1.6.0.6-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-devel1:1.6.0.6-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-javacomm1:1.6.0.6-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-jdbc1:1.6.0.6-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-plugin1:1.6.0.6-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-src1:1.6.0.6-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-sun1:1.6.0.15-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-demo1:1.6.0.15-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-devel1:1.6.0.15-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-jdbc1:1.6.0.15-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-plugin1:1.6.0.15-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-src1:1.6.0.15-1jpp.1.el4
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-ibm-accessibility1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.10-1jpp.4.el5
Red Hat rhel extras 5java-1.5.0-sun0:1.5.0.20-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-demo0:1.5.0.20-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-devel0:1.5.0.20-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-jdbc0:1.5.0.20-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-plugin0:1.5.0.20-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-src0:1.5.0.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.6-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-sun1:1.6.0.15-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-demo1:1.6.0.15-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-devel1:1.6.0.15-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-jdbc1:1.6.0.15-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-plugin1:1.6.0.15-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-src1:1.6.0.15-1jpp.1.el5