Read the docs
TI-2009-02112 Aliases CVE-2009-2205GHSA-82xg-93p7-mqqc

Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X…

Priority LOW 35CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Why it matters now

EPSS 0.02317 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*10.5VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*10.5.0VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*10.5.1VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*10.5.2VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*10.5.2 2008-002VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*10.5.3VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*10.5.4VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*10.5.5VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*10.5.6VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*10.5.7VulnerableApple
  • cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:* Versions 10.5.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:* Versions 10.5.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:* Versions 10.5.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:* Versions 10.5.2 2008-002 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:* Versions 10.5.3 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:* Versions 10.5.4 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:* Versions 10.5.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:* Versions 10.5.6 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:* Versions 10.5.7 Vulnerable ·Apple
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*10.5VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*10.5.0VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*10.5.1VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*10.5.2VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*10.5.3VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*10.5.4VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*10.5.5VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*10.5.6VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*10.5.7VulnerableApple
cpe:2.3:a:apple:java_1.4:*:21:*:*:*:*:*:*up to 2VulnerableApple
cpe:2.3:a:apple:java_1.4:2:*:*:*:*:*:*:*2VulnerableApple
cpe:2.3:a:apple:java_1.4:2:16:*:*:*:*:*:*2 16VulnerableApple
cpe:2.3:a:apple:java_1.4:2:18:*:*:*:*:*:*2 18VulnerableApple
cpe:2.3:a:apple:java_1.5:*:19:*:*:*:*:*:*up to 0VulnerableApple
cpe:2.3:a:apple:java_1.6:*:13:*:*:*:*:*:*up to 0VulnerableApple
cpe:2.3:a:apple:java_1.6:0:*:*:*:*:*:*:*0VulnerableApple
cpe:2.3:a:apple:java_1.6:0:05:*:*:*:*:*:*0 05VulnerableApple
cpe:2.3:a:apple:java_1.6:0:07:*:*:*:*:*:*0 07VulnerableApple
  • cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:* Versions 10.5.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:* Versions 10.5.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:* Versions 10.5.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:* Versions 10.5.3 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:* Versions 10.5.4 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:* Versions 10.5.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:* Versions 10.5.6 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:* Versions 10.5.7 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.4:*:21:*:*:*:*:*:* Versions up to 2 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.4:2:*:*:*:*:*:*:* Versions 2 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.4:2:16:*:*:*:*:*:* Versions 2 16 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.4:2:18:*:*:*:*:*:* Versions 2 18 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.5:*:19:*:*:*:*:*:* Versions up to 0 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.6:*:13:*:*:*:*:*:* Versions up to 0 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.6:0:*:*:*:*:*:*:* Versions 0 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.6:0:05:*:*:*:*:*:* Versions 0 05 Vulnerable ·Apple
  • cpe:2.3:a:apple:java_1.6:0:07:*:*:*:*:*:* Versions 0 07 Vulnerable ·Apple

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2205
  2. 2026-10-03 Alias added: GHSA-82xg-93p7-mqqc

References

Patch 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences