CVE-2009-3876

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and…

published November 5, 2009

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03475 · 89.0th percentile
Published
2009-11-05T16:00Z
EPSS history
Timeline
  • 05 NOV 16:00Z
    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and…
    cvelistv5