CVE:CVE-2009-2205
CNNVD:CNNVD-200909-151
Mac OS Java Update 5之前的X 10.5的Java Web Start指令发射装置中存在栈缓冲区溢出漏洞。攻击者可以借助未明向量，执行任意代码或引起拒绝服务攻击(应用程序崩溃)。
solution:Upgrade apple mac_os_x to a higher version than 10.5,10.5.0,10.5.1,10.5.2,10.5.2:2008-002,10.5.3,10.5.4,10.5.5,10.5.6,10.5.7,and avoid the version 10.5,10.5.0,10.5.1,10.5.2,10.5.2:2008-002,10.5.3,10.5.4,10.5.5,10.5.6,10.5.7; Upgrade apple mac_os_x_server to a higher version than 10.5,10.5.0,10.5.1,10.5.2,10.5.3,10.5.4,10.5.5,10.5.6,10.5.7,and avoid the version 10.5,10.5.0,10.5.1,10.5.2,10.5.3,10.5.4,10.5.5,10.5.6,10.5.7; Upgrade apple java_1.4 to a higher version than *:21,2,2:16,2:18,and avoid the version *:21,2,2:16,2:18; Upgrade apple java_1.5 to a higher version than *:19,and avoid the version *:19; Upgrade apple java_1.6 to a higher version than *:13,0,0:05,0:07,and avoid the version *:13,0,0:05,0:07