CVE-2009-2674
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK...
7.5 High
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
Exploit likelihood
6.39%Up 2.0 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
- Record
CVE-2009-2674- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
- Record
CVE-2009-2674- Updated
- 2026-11-02
EUVDEUVD-2009-2667 No score
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
- Record
EUVD-2009-2667- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3fh4-76x3-9pjc No score
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK...
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
- Record
GHSA-3fh4-76x3-9pjc- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
Show 47 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2674 is a high vulnerability (CVSS 7.5) in Sun Jdk, published August 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.39%, the 93rd percentile. No source names a fixed version.
References
zerodayinitiative.com/advisories/ZDI-09-050
rhn.redhat.com/errata/RHSA-2009-1200.html
secunia.com/advisories/36162
vupen.com/english/advisories/2009/2543
security.gentoo.org/glsa/glsa-200911-02.xml
marc.info?l=bugtraq&m=125787273209737&w=2
Show 194 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073
sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1
mandriva.com/security/advisories?name=MDVSA-2009:209
redhat.com/archives/fedora-package-announce/2009-August/msg00310.html
us-cert.gov/cas/techalerts/TA09-294A.html
oracle.com/technetwork/topics/security/cpuoct2009-096303.html
lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
exchange.xforce.ibmcloud.com/vulnerabilities/52339
nvd.nist.gov/vuln/detail/CVE-2009-2674
github.com/advisories/GHSA-3fh4-76x3-9pjc
access.redhat.com/errata/RHSA-2009:1200
blogs.sun.com/security/entry/advance_notification_of_security_updates5
bugzilla.redhat.com/show_bug.cgi?id=511915
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1200.json
cve.org/CVERecord?id=CVE-2009-0217
ibm.com/developerworks/java/jdk/alerts
This page doesn't list everything
Left out here: 10 references. The JSON record has them.