CVE-2009-2675

CVE-2009-2675 describes an integer overflow vulnerability in the unpack200 utility within Sun Java Runtime Environment (JRE) versions prior to JDK/JRE 6 Update 15 and JDK/JRE 5.0 Update 20. This flaw allows attackers to gain privileges by crafting malicious Pack200-compressed JAR files, leading to a heap-based buffer overflow during decompression. With a CVSS score of 10.0, this is a critical vulnerability, easily exploitable over the network with low attack complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.