CVE-2009-3872
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before...
9.3 High
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.
Exploit likelihood
4.25%Up 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.
- Record
CVE-2009-3872- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.
- Record
CVE-2009-3872- Updated
- 2026-11-02
EUVDEUVD-2009-3843 No score
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.
- Record
EUVD-2009-3843- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hvww-vwv6-cwhq No score
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before...
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.
- Record
GHSA-hvww-vwv6-cwhq- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibmRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-demoRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-develRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-srcRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibmRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-develRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
Show 95 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3872 is a high vulnerability (CVSS 9.3) in Sun Jdk, published November 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.25%, the 91st percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=126566824131534&w=2
securityfocus.com/bid/36881
support.apple.com/kb/HT3970
Show 194 moreShow less
security.gentoo.org/glsa/glsa-200911-02.xml
redhat.com/support/errata/RHSA-2009-1694.html
lists.apple.com/archives/security-announce/2009/Dec/msg00000.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6963
secunia.com/advisories/37231
securitytracker.com/id?1023132
lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html
sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1
vupen.com/english/advisories/2009/3131
oracle.com/technetwork/topics/security/cpujan2010-084891.html
java.sun.com/javase/6/webnotes/6u17.html
nvd.nist.gov/vuln/detail/CVE-2009-3872
github.com/advisories/GHSA-hvww-vwv6-cwhq
access.redhat.com/errata/RHSA-2009:1551
ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=472206
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1551.json
cve.org/CVERecord?id=CVE-2008-5349
blogs.sun.com/security/entry/advance_notification_of_security_updates6
This page doesn't list everything
Left out here: 25 references. The JSON record has them.