CVE-2009-3880

The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly…

published November 9, 2009

CVSS
—
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01788 · 78.2th percentile
Published
2009-11-09T19:00Z
EPSS history
Timeline
  • 09 NOV 19:00Z
    The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly…
    cvelistv5