CVE-2009-3879
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun...
7.5 High
CVE-2009-3879 is a high vulnerability (CVSS 7.5) in Sun Openjdk, published November 9, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.34%, the 83rd percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.34%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
Exploit likelihood
2.34%Up 1.2 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs | before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.5.0-sunRed Hat:network_satellite:5.1::el4 From an advisory covering 32 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-develRed Hat:network_satellite:5.1::el4 From an advisory covering 32 CVEs | before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
- Record
CVE-2009-3879- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
- Record
CVE-2009-3879- Updated
- 2026-11-02
EUVDEUVD-2009-3850No score
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
- Record
EUVD-2009-3850- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j25w-hjf5-jg7gNo score
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun...
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
- Record
GHSA-j25w-hjf5-jg7g- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7545
security.gentoo.org/glsa/glsa-200911-02.xml
bugzilla.redhat.com/show_bug.cgi?id=530297
java.sun.com/javase/6/webnotes/6u17.html
Show 182 moreShow less
mandriva.com/security/advisories?name=MDVSA-2010:084
secunia.com/advisories/37386
nvd.nist.gov/vuln/detail/CVE-2009-3879
github.com/advisories/GHSA-j25w-hjf5-jg7g
access.redhat.com/errata/RHSA-2009:1560
blogs.sun.com/security/entry/advance_notification_of_security_updates6
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1560.json
cve.org/CVERecord?id=CVE-2009-2409
sunsolve.sun.com/search/document.do?assetkey=118666