CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Permissions Privileges and Access Controls
Summary: integer overflow in the unpack200 utility in sun java runtime environment (jre) in jdk and jre 6 before update 15, and jdk and jre 5.0 before update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a pack200-compressed jar file, which leads to a heap-based buffer overflow during decompression.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-08-05
Last Modified Date: 2018-10-10