CVE-2009-3877

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and…

published November 5, 2009

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04905 · 92.1th percentile
Published
2009-11-05T16:00Z
EPSS history
Timeline
  • 05 NOV 16:00Z
    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and…
    cvelistv5