Vulnerability Database
289,689
Total vulnerabilities in the database
CVE-2009-1190
Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540.
| Software | From | Fixed in |
|---|---|---|
| sun / jdk | - | 1.5.0.x |
| sun / jdk | 1.1.0 | 1.1.0.x |
| sun / jdk | 1.1.6-update7 | 1.1.6-update7.x |
| sun / jdk | 1.1.6 | 1.1.6.x |
| sun / jdk | 1.1.7b-update5 | 1.1.7b-update5.x |
| sun / jdk | 1.1.7b | 1.1.7b.x |
| sun / jdk | 1.1.8-update14 | 1.1.8-update14.x |
| sun / jdk | 1.1.8-update8 | 1.1.8-update8.x |
| sun / jdk | 1.1.8-update10 | 1.1.8-update10.x |
| sun / jdk | 1.1.8-update13 | 1.1.8-update13.x |
| sun / jdk | 1.1.8-update7 | 1.1.8-update7.x |
| sun / jdk | 1.1.8-update2 | 1.1.8-update2.x |
| sun / jdk | 1.2.0 | 1.2.0.x |
| sun / jdk | 1.2.1-update3 | 1.2.1-update3.x |
| sun / jdk | 1.2.1 | 1.2.1.x |
| sun / jdk | 1.2.2-update4 | 1.2.2-update4.x |
| sun / jdk | 1.2.2-update5 | 1.2.2-update5.x |
| sun / jdk | 1.3.0 | 1.3.0.x |
| sun / jdk | 1.3.0_01 | 1.3.0_01.x |
| sun / jdk | 1.3.0_02 | 1.3.0_02.x |
| sun / jdk | 1.3.0_03 | 1.3.0_03.x |
| sun / jdk | 1.3.0_04 | 1.3.0_04.x |
| sun / jdk | 1.3.0_05 | 1.3.0_05.x |
| sun / jdk | 1.3.1 | 1.3.1.x |
| sun / jdk | 1.3.1-update20 | 1.3.1-update20.x |
| sun / jdk | 1.3.1-update19 | 1.3.1-update19.x |
| sun / jdk | 1.3.1_01 | 1.3.1_01.x |
| sun / jdk | 1.3.1_01a | 1.3.1_01a.x |
| sun / jdk | 1.3.1_02 | 1.3.1_02.x |
| sun / jdk | 1.3.1_03 | 1.3.1_03.x |
| sun / jdk | 1.3.1_04 | 1.3.1_04.x |
| sun / jdk | 1.3.1_05 | 1.3.1_05.x |
| sun / jdk | 1.3.1_06 | 1.3.1_06.x |
| sun / jdk | 1.3.1_07 | 1.3.1_07.x |
| sun / jdk | 1.3.1_08 | 1.3.1_08.x |
| sun / jdk | 1.3.1_09 | 1.3.1_09.x |
| sun / jdk | 1.3.1_10 | 1.3.1_10.x |
| sun / jdk | 1.3.1_11 | 1.3.1_11.x |
| sun / jdk | 1.3.1_12 | 1.3.1_12.x |
| sun / jdk | 1.3.1_13 | 1.3.1_13.x |
| sun / jdk | 1.3.1_14 | 1.3.1_14.x |
| sun / jdk | 1.3.1_15 | 1.3.1_15.x |
| sun / jdk | 1.3.1_16 | 1.3.1_16.x |
| sun / jdk | 1.3.1_17 | 1.3.1_17.x |
| sun / jdk | 1.3.1_18 | 1.3.1_18.x |
| sun / jdk | 1.3.1_19 | 1.3.1_19.x |
| sun / jdk | 1.3.1_20 | 1.3.1_20.x |
| sun / jdk | 1.3.1_21 | 1.3.1_21.x |
| sun / jdk | 1.3.1_22 | 1.3.1_22.x |
| sun / jdk | 1.3.1_23 | 1.3.1_23.x |
| sun / jdk | 1.3.1_24 | 1.3.1_24.x |
| sun / jdk | 1.3.1_25 | 1.3.1_25.x |
| sun / jdk | 1.3.1_26 | 1.3.1_26.x |
| sun / jdk | 1.3.1_27 | 1.3.1_27.x |
| sun / jdk | 1.3.1_28 | 1.3.1_28.x |
| sun / jdk | 1.4.0 | 1.4.0.x |
| sun / jdk | 1.4.0_01 | 1.4.0_01.x |
| sun / jdk | 1.4.0_02 | 1.4.0_02.x |
| sun / jdk | 1.4.0_03 | 1.4.0_03.x |
| sun / jdk | 1.4.0_04 | 1.4.0_04.x |
| sun / jdk | 1.4.1 | 1.4.1.x |
| sun / jdk | 1.4.1_01 | 1.4.1_01.x |
| sun / jdk | 1.4.1_02 | 1.4.1_02.x |
| sun / jdk | 1.4.1_03 | 1.4.1_03.x |
| sun / jdk | 1.4.1_04 | 1.4.1_04.x |
| sun / jdk | 1.4.1_05 | 1.4.1_05.x |
| sun / jdk | 1.4.1_06 | 1.4.1_06.x |
| sun / jdk | 1.4.1_07 | 1.4.1_07.x |
| sun / jdk | 1.4.2 | 1.4.2.x |
| sun / jdk | 1.4.2_1 | 1.4.2_1.x |
| sun / jdk | 1.4.2_2 | 1.4.2_2.x |
| sun / jdk | 1.4.2_3 | 1.4.2_3.x |
| sun / jdk | 1.4.2_4 | 1.4.2_4.x |
| sun / jdk | 1.4.2_5 | 1.4.2_5.x |
| sun / jdk | 1.4.2_6 | 1.4.2_6.x |
| sun / jdk | 1.4.2_7 | 1.4.2_7.x |
| sun / jdk | 1.4.2_8 | 1.4.2_8.x |
| sun / jdk | 1.4.2_9 | 1.4.2_9.x |
| sun / jdk | 1.4.2_10 | 1.4.2_10.x |
| sun / jdk | 1.4.2_11 | 1.4.2_11.x |
| sun / jdk | 1.4.2_12 | 1.4.2_12.x |
| sun / jdk | 1.4.2_13 | 1.4.2_13.x |
| sun / jdk | 1.4.2_14 | 1.4.2_14.x |
| sun / jdk | 1.4.2_15 | 1.4.2_15.x |
| sun / jdk | 1.4.2_16 | 1.4.2_16.x |
| sun / jdk | 1.4.2_17 | 1.4.2_17.x |
| sun / jdk | 1.4.2_18 | 1.4.2_18.x |
| sun / jdk | 1.4.2_19 | 1.4.2_19.x |
| sun / jdk | 1.5.0-update21 | 1.5.0-update21.x |
| sun / jdk | 1.5.0-update_18 | 1.5.0-update_18.x |
| sun / jdk | 1.5.0-update11 | 1.5.0-update11.x |
| sun / jdk | 1.5.0-update_9 | 1.5.0-update_9.x |
| sun / jdk | 1.5.0-update_15 | 1.5.0-update_15.x |
| sun / jdk | 1.5.0-update_19 | 1.5.0-update_19.x |
| sun / jdk | 1.5.0-update20 | 1.5.0-update20.x |
| sun / jdk | 1.5.0-update15 | 1.5.0-update15.x |
| sun / jdk | 1.5.0-update18 | 1.5.0-update18.x |
| sun / jdk | 1.5.0-update3 | 1.5.0-update3.x |
| sun / jdk | 1.5.0-update_6 | 1.5.0-update_6.x |
| sun / jdk | 1.5.0-update_17 | 1.5.0-update_17.x |
| sun / jdk | 1.5.0-update17 | 1.5.0-update17.x |
| sun / jdk | 1.5.0-update_10 | 1.5.0-update_10.x |
| sun / jdk | 1.5.0-update16 | 1.5.0-update16.x |
| sun / jdk | 1.5.0-update9 | 1.5.0-update9.x |
| sun / jdk | 1.5.0-update_5 | 1.5.0-update_5.x |
| sun / jdk | 1.5.0-update22 | 1.5.0-update22.x |
| sun / jdk | 1.5.0-update_1 | 1.5.0-update_1.x |
| sun / jdk | 1.5.0-update14 | 1.5.0-update14.x |
| sun / jdk | 1.5.0-update23 | 1.5.0-update23.x |
| sun / jdk | 1.5.0-update_13 | 1.5.0-update_13.x |
| sun / jdk | 1.5.0-update6 | 1.5.0-update6.x |
| sun / jdk | 1.5.0-update_20 | 1.5.0-update_20.x |
| sun / jdk | 1.5.0-update11_b03 | 1.5.0-update11_b03.x |
| sun / jdk | 1.5.0-update1 | 1.5.0-update1.x |
| sun / jdk | 1.5.0-update10 | 1.5.0-update10.x |
| sun / jdk | 1.5.0-update_2 | 1.5.0-update_2.x |
| sun / jdk | 1.5.0-update_14 | 1.5.0-update_14.x |
| sun / jdk | 1.5.0-update_8 | 1.5.0-update_8.x |
| sun / jdk | 1.5.0-update13 | 1.5.0-update13.x |
| sun / jdk | 1.5.0-update8 | 1.5.0-update8.x |
| sun / jdk | 1.5.0-update19 | 1.5.0-update19.x |
| sun / jdk | 1.5.0-update_11 | 1.5.0-update_11.x |
| sun / jdk | 1.5.0-update4 | 1.5.0-update4.x |
| sun / jdk | 1.5.0-update_16 | 1.5.0-update_16.x |
| sun / jdk | 1.5.0-update_4 | 1.5.0-update_4.x |
| sun / jdk | 1.5.0-update7 | 1.5.0-update7.x |
| sun / jdk | 1.5.0-update7_b03 | 1.5.0-update7_b03.x |
| sun / jdk | 1.5.0-update2 | 1.5.0-update2.x |
| sun / jdk | 1.5.0-update_21 | 1.5.0-update_21.x |
| sun / jdk | 1.5.0-update25 | 1.5.0-update25.x |
| sun / jdk | 1.5.0-update24 | 1.5.0-update24.x |
| sun / jdk | 1.5.0-update_7 | 1.5.0-update_7.x |
| sun / jdk | 1.5.0-update5 | 1.5.0-update5.x |
| sun / jdk | 1.5.0-update_12 | 1.5.0-update_12.x |
| sun / jdk | 1.5.0-update12 | 1.5.0-update12.x |
| sun / jdk | 1.5.0 | 1.5.0.x |
| sun / jdk | 1.5.0-update_3 | 1.5.0-update_3.x |
| sun / jdk | 1.5.0_03 | 1.5.0_03.x |
org.springframework / spring-core
|
1.1.0 | 3.0.0.RELEASE |
- http://secunia.com/advisories/34892
- http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf
- http://www.securityfocus.com/archive/1/502926/100/0/threaded
- http://www.springsource.com/securityadvisory
- https://bugzilla.redhat.com/show_bug.cgi?id=497161
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50083