What’s Vulnerable › Vulnerabilities

CVE-2009-2205

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-09 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Affected products

Apple Java 1.4: through 2; 2, 2-16, 2-18
Apple Java 1.5: through 0
Apple Java 1.6: through 0; 0, 0-05, 0-07
macOS: 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.2-2008-002, 10.5.3 (+4)
Apple Mac Os X Server: 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4 (+3)

References

Get alerted when CVE-2009-2205 or the next vulnerability affects your stack