CVE-2009-3869
NoneCVSS
—
EPSS
65.4%
Published
Nov 5, 2009
CISA due date
—
The record
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.7.b09.el5 |
| Red Hat:network_satellite:5.3::el4 | java-1.6.0-ibm | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:network_satellite:5.3::el4 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:network_satellite:5.3::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:network_satellite:5.3::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm | 0 | 0:1.4.2.13.3-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.3-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.3-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.3-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.3-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.3-1jpp.1.el3 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm | 0 | 0:1.4.2.13.3-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.3-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.3-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.3-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.3-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.3-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.3-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm | 0 | 1:1.5.0.11-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-demo | 0 | 1:1.5.0.11-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-devel | 0 | 1:1.5.0.11-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.11-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.11-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.11-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-src | 0 | 1:1.5.0.11-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-sun | 0 | 0:1.5.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-sun-demo | 0 | 0:1.5.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-sun-devel | 0 | 0:1.5.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-sun-jdbc | 0 | 0:1.5.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-sun-plugin | 0 | 0:1.5.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-sun-src | 0 | 0:1.5.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-src | 0 | 1:1.6.0.7-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun | 0 | 1:1.6.0.17-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-demo | 0 | 1:1.6.0.17-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-devel | 0 | 1:1.6.0.17-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.17-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.17-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-src | 0 | 1:1.6.0.17-1jpp.1.el4 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-demo | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-devel | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-src | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-sun | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-sun-demo | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-sun-devel | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-sun-jdbc | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-sun-plugin | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-sun-src | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-demo | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-devel | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-src | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-demo | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-devel | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-plugin | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-src | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.3-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-demo | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-devel | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-src | 0 | 1:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-sun | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-sun-demo | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-sun-devel | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-sun-jdbc | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-sun-plugin | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-sun-src | 0 | 0:1.5.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-demo | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-devel | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-src | 0 | 1:1.6.0.7-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-demo | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-devel | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-plugin | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-src | 0 | 1:1.6.0.17-1jpp.2.el5 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm | 0 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:4 | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.4.sap-1jpp.1.el4_8 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm | 0 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
| Red Hat:rhel_extras_sap:5 | java-1.4.2-ibm-src | 0 | 0:1.4.2.13.4.sap-1jpp.1.el5 |
Related vulnerabilities
- CVE-2016-5542 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-3458 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-3427 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… Also affects java-1.6.0-openjdk
- CVE-2016-0686 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-0483 Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65… Also affects java-1.6.0-openjdk
- CVE-2015-4734 Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2015-4748 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and… Also affects java-1.6.0-openjdk
- CVE-2015-2590 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… Also affects java-1.6.0-openjdk