Unscored CVE-2009-2843 EUVD-2009-2833GHSA-vw7w-hxgp-f22h

Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes it easier for remote …

Published Dec 8, 2009 · Updated Sep 17, 2024 · Assigned by mitre

Description

Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes it easier for remote attackers to execute arbitrary code via an applet.

References

http://support.apple.com/kb/HT3970
http://support.apple.com/kb/HT3969
APPLE-SA-2009-12-03-1 vendor-advisory
37206 vdb-entry
APPLE-SA-2009-12-03-2 vendor-advisory
37581 third-party-advisory