CVE-2009-3728

Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before…

published November 9, 2009

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03751 · 89.8th percentile
Published
2009-11-09T19:00Z
EPSS history
Timeline
  • 09 NOV 19:00Z
    Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before…
    cvelistv5