CVE-2009-3869
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in...
9.3 HighPublic exploit
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Exploit likelihood
65.4%Down 9.8 points since Feb 4, 2022
What each source reports
NVD Score used
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
- Record
CVE-2009-3869- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
- Record
CVE-2009-3869- Updated
- 2026-11-02
EUVDEUVD-2009-3840 No score
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
- Record
EUVD-2009-3840- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xf34-q2g4-cjm6 No score
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in...
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
- Record
GHSA-xf34-q2g4-cjm6- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
Show 125 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.4.2-ibmRed Hat:rhel_extras_sap:4 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el4_8 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-demoRed Hat:rhel_extras_sap:4 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el4_8 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-develRed Hat:rhel_extras_sap:4 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el4_8 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras_sap:4 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el4_8 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-srcRed Hat:rhel_extras_sap:4 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el4_8 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
java-1.4.2-ibmRed Hat:rhel_extras_sap:5 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el5 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras_sap:5 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el5 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras_sap:5 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el5 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras_sap:5 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el5 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras_sap:5 From an advisory covering 6 CVEs |
before 0:1.4.2.13.4.sap-1jpp.1.el5 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Sun Java JRE AWT setDiffICM Buffer Overflow | 2009-11-04 |
| Exploit-DB | Sun Java - JRE AWT setDiffICM Buffer Overflow (Metasploit) | 2010-09-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3869 is a high vulnerability (CVSS 9.3) in Sun Jdk, published November 5, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 65.4%, the 99th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=126566824131534&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11262
securityfocus.com/bid/36881
support.apple.com/kb/HT3970
Show 194 moreShow less
security.gentoo.org/glsa/glsa-200911-02.xml
redhat.com/support/errata/RHSA-2009-1694.html
lists.apple.com/archives/security-announce/2009/Dec/msg00000.html
secunia.com/advisories/37231
securitytracker.com/id?1023132
lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html
sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1
zerodayinitiative.com/advisories/ZDI-09-078
vupen.com/english/advisories/2009/3131
oracle.com/technetwork/topics/security/cpujan2010-084891.html
java.sun.com/javase/6/webnotes/6u17.html
mandriva.com/security/advisories?name=MDVSA-2010:084
nvd.nist.gov/vuln/detail/CVE-2009-3869
github.com/advisories/GHSA-xf34-q2g4-cjm6
access.redhat.com/errata/RHSA-2009:1560
bugzilla.redhat.com/show_bug.cgi?id=530300
blogs.sun.com/security/entry/advance_notification_of_security_updates6
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1560.json
cve.org/CVERecord?id=CVE-2009-2409
ibm.com/developerworks/java/jdk/alerts
kbase.redhat.com/faq/docs/DOC-20491
This page doesn't list everything
Left out here: 31 references. The JSON record has them.