PT-2009-6101 · Sun+3 · Java Se+3

Published 2009-11-05 · Updated 2018-10-30 · CVE-2009-3876

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE versions prior to JDK and JRE 5.0 Update 22 Sun Java SE versions prior to JDK and JRE 6 Update 17 Sun Java SE SDK and JRE 1.3.x versions prior to 1.3.1 27 Sun Java SE SDK and JRE 1.4.x versions prior to 1.4.2 24

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by providing crafted DER encoded data. This data is not properly decoded by the ASN.1 DER input stream parser.

Recommendations For Sun Java SE versions prior to JDK and JRE 5.0 Update 22, update to JDK and JRE 5.0 Update 22 or later. For Sun Java SE versions prior to JDK and JRE 6 Update 17, update to JDK and JRE 6 Update 17 or later. For Sun Java SE SDK and JRE 1.3.x versions prior to 1.3.1 27, update to SDK and JRE 1.3.1 27 or later. For Sun Java SE SDK and JRE 1.4.x versions prior to 1.4.2 24, update to SDK and JRE 1.4.2 24 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-3876

HPSBUX02503

RHSA-2009:1551

RHSA-2009:1560

RHSA-2009:1571

RHSA-2009:1584

RHSA-2009:1643

RHSA-2009:1647

RHSA-2009:1662

RHSA-2009:1694

RHSA-2009_1584

RHSA-2010:0043

Affected Products

Hp-Ux

Java Platform

Java Se

Red Hat

References · 55

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_setdifficm_bof.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_getsoundbank_bof.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3876 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3872 · Security Note
• http://redhat.com/support/errata/RHSA-2009-1694.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3871 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3873 · Security Note
• https://bdu.fstec.ru/vul/2015-03444 · Security Note
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:084 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3131 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3877 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-3876 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3874 · Security Note