CVE-2009-3884

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of…

published November 9, 2009

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02951 · 87.1th percentile
Published
2009-11-09T19:00Z
EPSS history
Timeline
  • 09 NOV 19:00Z
    The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of…
    cvelistv5