PT-2009-6110 · Sun · Sun Java Se 6+1

Marc Schoenefeld · Published 2009-11-09 · Updated 2017-09-19 · CVE-2009-3885

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Java SE 5.0 before Update 22 Sun Java SE 6 before Update 17

Description The issue allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file.

Recommendations For Sun Java SE 5.0 before Update 22, update to Update 22 or later to resolve the issue. For Sun Java SE 6 before Update 17, update to Update 17 or later to resolve the issue.

Fix

Related Identifiers

CVE-2009-3885

Affected Products

Sun Java Se 5.0

Sun Java Se 6

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2009-3885 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2010:084 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=530114 · Note
• http://java.sun.com/j2se/1.5.0/ReleaseNotes.html · Note
• http://java.sun.com/javase/6/webnotes/6u17.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7094 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3885 · Note