PT-2009-6110 · Sun · Sun Java Se 6+1

Marc Schoenefeld · Publicado 2009-11-09 · Atualizado 2017-09-19 · CVE-2009-3885

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE 5.0 before Update 22 Sun Java SE 6 before Update 17

Description The issue allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file.

Recommendations For Sun Java SE 5.0 before Update 22, update to Update 22 or later to resolve the issue. For Sun Java SE 6 before Update 17, update to Update 17 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2009-3885

Produtos afetados

Sun Java Se 5.0

Sun Java Se 6

Referências · 7

• https://bugzilla.redhat.com/show_bug.cgi?id=530114 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3885 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2010:084 · Aviso do Fabricante
• http://java.sun.com/j2se/1.5.0/ReleaseNotes.html · Nota
• http://java.sun.com/javase/6/webnotes/6u17.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7094 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3885 · Nota