CVE-2009-3869
Summary
| CVE | CVE-2009-3869 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-11-05 16:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows | All | All | All | All |
| Application | Sun | Java Se | All | All | business | All |
| Application | Sun | Jdk | 1.5.0 | update_1 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_10 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_11 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_12 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_13 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_14 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_15 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_16 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_17 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_18 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_19 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_2 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_20 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_21 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_3 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_4 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_5 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_6 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_7 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_8 | All | All |
| Application | Sun | Jdk | 1.5.0 | update_9 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_1 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_10 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_11 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_12 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_13 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_14 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_15 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_16 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_3 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_4 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_5 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_6 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_7 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_8 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_9 | All | All |
| Application | Sun | Jre | 1.3.1_01 | All | All | All |
| Application | Sun | Jre | 1.3.1_01a | All | All | All |
| Application | Sun | Jre | 1.3.1_02 | All | All | All |
| Application | Sun | Jre | 1.3.1_03 | All | All | All |
| Application | Sun | Jre | 1.3.1_04 | All | All | All |
| Application | Sun | Jre | 1.3.1_05 | All | All | All |
| Application | Sun | Jre | 1.3.1_06 | All | All | All |
| Application | Sun | Jre | 1.3.1_07 | All | All | All |
| Application | Sun | Jre | 1.3.1_08 | All | All | All |
| Application | Sun | Jre | 1.3.1_09 | All | All | All |
| Application | Sun | Jre | 1.3.1_1 | All | All | All |
| Application | Sun | Jre | 1.3.1_10 | All | All | All |
| Application | Sun | Jre | 1.3.1_11 | All | All | All |
| Application | Sun | Jre | 1.3.1_12 | All | All | All |
| Application | Sun | Jre | 1.3.1_13 | All | All | All |
| Application | Sun | Jre | 1.3.1_14 | All | All | All |
| Application | Sun | Jre | 1.3.1_15 | All | All | All |
| Application | Sun | Jre | 1.3.1_16 | All | All | All |
| Application | Sun | Jre | 1.3.1_17 | All | All | All |
| Application | Sun | Jre | 1.3.1_18 | All | All | All |
| Application | Sun | Jre | 1.3.1_19 | All | All | All |
| Application | Sun | Jre | 1.3.1_2 | All | All | All |
| Application | Sun | Jre | 1.3.1_20 | All | All | All |
| Application | Sun | Jre | 1.3.1_21 | All | All | All |
| Application | Sun | Jre | 1.3.1_22 | All | All | All |
| Application | Sun | Jre | 1.3.1_23 | All | All | All |
| Application | Sun | Jre | 1.3.1_24 | All | All | All |
| Application | Sun | Jre | 1.3.1_25 | All | All | All |
| Application | Sun | Jre | 1.3.1_3 | All | All | All |
| Application | Sun | Jre | 1.3.1_4 | All | All | All |
| Application | Sun | Jre | 1.3.1_5 | All | All | All |
| Application | Sun | Jre | 1.3.1_6 | All | All | All |
| Application | Sun | Jre | 1.3.1_7 | All | All | All |
| Application | Sun | Jre | 1.3.1_8 | All | All | All |
| Application | Sun | Jre | 1.3.1_9 | All | All | All |
| Application | Sun | Jre | 1.4.2_02 | All | All | All |
| Application | Sun | Jre | 1.4.2_03 | All | All | All |
| Application | Sun | Jre | 1.4.2_04 | All | All | All |
| Application | Sun | Jre | 1.4.2_05 | All | All | All |
| Application | Sun | Jre | 1.4.2_06 | All | All | All |
| Application | Sun | Jre | 1.4.2_07 | All | All | All |
| Application | Sun | Jre | 1.4.2_08 | All | All | All |
| Application | Sun | Jre | 1.4.2_09 | All | All | All |
| Application | Sun | Jre | 1.4.2_1 | All | All | All |
| Application | Sun | Jre | 1.4.2_10 | All | All | All |
| Application | Sun | Jre | 1.4.2_11 | All | All | All |
| Application | Sun | Jre | 1.4.2_12 | All | All | All |
| Application | Sun | Jre | 1.4.2_13 | All | All | All |
| Application | Sun | Jre | 1.4.2_14 | All | All | All |
| Application | Sun | Jre | 1.4.2_15 | All | All | All |
| Application | Sun | Jre | 1.4.2_16 | All | All | All |
| Application | Sun | Jre | 1.4.2_17 | All | All | All |
| Application | Sun | Jre | 1.4.2_18 | All | All | All |
| Application | Sun | Jre | 1.4.2_19 | All | All | All |
| Application | Sun | Jre | 1.4.2_2 | All | All | All |
| Application | Sun | Jre | 1.4.2_20 | All | All | All |
| Application | Sun | Jre | 1.4.2_21 | All | All | All |
| Application | Sun | Jre | 1.4.2_22 | All | All | All |
| Application | Sun | Jre | 1.4.2_3 | All | All | All |
| Application | Sun | Jre | 1.4.2_4 | All | All | All |
| Application | Sun | Jre | 1.4.2_5 | All | All | All |
| Application | Sun | Jre | 1.4.2_6 | All | All | All |
| Application | Sun | Jre | 1.4.2_7 | All | All | All |
| Application | Sun | Jre | 1.4.2_8 | All | All | All |
| Application | Sun | Jre | 1.4.2_9 | All | All | All |
| Application | Sun | Jre | 1.5.0 | update_1 | All | All |
| Application | Sun | Jre | 1.5.0 | update_11 | All | All |
| Application | Sun | Jre | 1.5.0 | update_12 | All | All |
| Application | Sun | Jre | 1.5.0 | update_13 | All | All |
| Application | Sun | Jre | 1.5.0 | update_14 | All | All |
| Application | Sun | Jre | 1.5.0 | update_15 | All | All |
| Application | Sun | Jre | 1.5.0 | update_16 | All | All |
| Application | Sun | Jre | 1.5.0 | update_17 | All | All |
| Application | Sun | Jre | 1.5.0 | update_18 | All | All |
| Application | Sun | Jre | 1.5.0 | update_19 | All | All |
| Application | Sun | Jre | 1.5.0 | update_2 | All | All |
| Application | Sun | Jre | 1.5.0 | update_20 | All | All |
| Application | Sun | Jre | 1.5.0 | update_21 | All | All |
| Application | Sun | Jre | 1.5.0 | update_3 | All | All |
| Application | Sun | Jre | 1.5.0 | update_4 | All | All |
| Application | Sun | Jre | 1.5.0 | update_5 | All | All |
| Application | Sun | Jre | 1.5.0 | update_6 | All | All |
| Application | Sun | Jre | 1.5.0 | update_7 | All | All |
| Application | Sun | Jre | 1.5.0 | update_8 | All | All |
| Application | Sun | Jre | 1.5.0 | update_9 | All | All |
| Application | Sun | Jre | 1.6.0 | update_1 | All | All |
| Application | Sun | Jre | 1.6.0 | update_10 | All | All |
| Application | Sun | Jre | 1.6.0 | update_11 | All | All |
| Application | Sun | Jre | 1.6.0 | update_12 | All | All |
| Application | Sun | Jre | 1.6.0 | update_13 | All | All |
| Application | Sun | Jre | 1.6.0 | update_14 | All | All |
| Application | Sun | Jre | 1.6.0 | update_15 | All | All |
| Application | Sun | Jre | 1.6.0 | update_16 | All | All |
| Application | Sun | Jre | 1.6.0 | update_2 | All | All |
| Application | Sun | Jre | 1.6.0 | update_3 | All | All |
| Application | Sun | Jre | 1.6.0 | update_4 | All | All |
| Application | Sun | Jre | 1.6.0 | update_5 | All | All |
| Application | Sun | Jre | 1.6.0 | update_6 | All | All |
| Application | Sun | Jre | 1.6.0 | update_7 | All | All |
| Application | Sun | Jre | 1.6.0 | update_8 | All | All |
| Application | Sun | Jre | 1.6.0 | update_9 | All | All |
| Application | Sun | Sdk | 1.3.1_01 | All | All | All |
| Application | Sun | Sdk | 1.3.1_01a | All | All | All |
| Application | Sun | Sdk | 1.3.1_02 | All | All | All |
| Application | Sun | Sdk | 1.3.1_03 | All | All | All |
| Application | Sun | Sdk | 1.3.1_04 | All | All | All |
| Application | Sun | Sdk | 1.3.1_05 | All | All | All |
| Application | Sun | Sdk | 1.3.1_06 | All | All | All |
| Application | Sun | Sdk | 1.3.1_07 | All | All | All |
| Application | Sun | Sdk | 1.3.1_08 | All | All | All |
| Application | Sun | Sdk | 1.3.1_09 | All | All | All |
| Application | Sun | Sdk | 1.3.1_10 | All | All | All |
| Application | Sun | Sdk | 1.3.1_11 | All | All | All |
| Application | Sun | Sdk | 1.3.1_12 | All | All | All |
| Application | Sun | Sdk | 1.3.1_13 | All | All | All |
| Application | Sun | Sdk | 1.3.1_14 | All | All | All |
| Application | Sun | Sdk | 1.3.1_15 | All | All | All |
| Application | Sun | Sdk | 1.3.1_16 | All | All | All |
| Application | Sun | Sdk | 1.3.1_17 | All | All | All |
| Application | Sun | Sdk | 1.3.1_18 | All | All | All |
| Application | Sun | Sdk | 1.3.1_19 | All | All | All |
| Application | Sun | Sdk | 1.3.1_2 | All | All | All |
| Application | Sun | Sdk | 1.3.1_20 | All | All | All |
| Application | Sun | Sdk | 1.3.1_21 | All | All | All |
| Application | Sun | Sdk | 1.3.1_22 | All | All | All |
| Application | Sun | Sdk | 1.3.1_23 | All | All | All |
| Application | Sun | Sdk | 1.3.1_24 | All | All | All |
| Application | Sun | Sdk | 1.3.1_25 | All | All | All |
| Application | Sun | Sdk | 1.3.1_3 | All | All | All |
| Application | Sun | Sdk | 1.3.1_4 | All | All | All |
| Application | Sun | Sdk | 1.3.1_5 | All | All | All |
| Application | Sun | Sdk | 1.3.1_6 | All | All | All |
| Application | Sun | Sdk | 1.3.1_7 | All | All | All |
| Application | Sun | Sdk | 1.3.1_8 | All | All | All |
| Application | Sun | Sdk | 1.3.1_9 | All | All | All |
| Application | Sun | Sdk | 1.4.2_01 | All | All | All |
| Application | Sun | Sdk | 1.4.2_02 | All | All | All |
| Application | Sun | Sdk | 1.4.2_03 | All | All | All |
| Application | Sun | Sdk | 1.4.2_04 | All | All | All |
| Application | Sun | Sdk | 1.4.2_05 | All | All | All |
| Application | Sun | Sdk | 1.4.2_06 | All | All | All |
| Application | Sun | Sdk | 1.4.2_07 | All | All | All |
| Application | Sun | Sdk | 1.4.2_08 | All | All | All |
| Application | Sun | Sdk | 1.4.2_09 | All | All | All |
| Application | Sun | Sdk | 1.4.2_1 | All | All | All |
| Application | Sun | Sdk | 1.4.2_10 | All | All | All |
| Application | Sun | Sdk | 1.4.2_11 | All | All | All |
| Application | Sun | Sdk | 1.4.2_12 | All | All | All |
| Application | Sun | Sdk | 1.4.2_13 | All | All | All |
| Application | Sun | Sdk | 1.4.2_14 | All | All | All |
| Application | Sun | Sdk | 1.4.2_15 | All | All | All |
| Application | Sun | Sdk | 1.4.2_16 | All | All | All |
| Application | Sun | Sdk | 1.4.2_17 | All | All | All |
| Application | Sun | Sdk | 1.4.2_18 | All | All | All |
| Application | Sun | Sdk | 1.4.2_19 | All | All | All |
| Application | Sun | Sdk | 1.4.2_2 | All | All | All |
| Application | Sun | Sdk | 1.4.2_20 | All | All | All |
| Application | Sun | Sdk | 1.4.2_21 | All | All | All |
| Application | Sun | Sdk | 1.4.2_22 | All | All | All |
| Application | Sun | Sdk | 1.4.2_3 | All | All | All |
| Application | Sun | Sdk | 1.4.2_4 | All | All | All |
| Application | Sun | Sdk | 1.4.2_5 | All | All | All |
| Application | Sun | Sdk | 1.4.2_6 | All | All | All |
| Application | Sun | Sdk | 1.4.2_7 | All | All | All |
| Application | Sun | Sdk | 1.4.2_8 | All | All | All |
| Application | Sun | Sdk | 1.4.2_9 | All | All | All |
| Operating System | Sun | Solaris | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Zero Day Initiative | af854a3a-2127-422b-91ae-364da2661108 | zerodayinitiative.com | Patch |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Patch, Vendor Advisory |
| About the security content of Java for Mac OS X 10.5 Update 6 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| Advisories | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Oracle Critical Patch Update Advisory - January 2010 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| #270474: Buffer and Integer Overflow Vulnerabilities in the Java Runtime Environment With Processing Audio and Image Files May Allow Privileges to be Escalated | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | Patch, Vendor Advisory |
| Java SE 6 Update 17 Release Notes. | af854a3a-2127-422b-91ae-364da2661108 | java.sun.com | Vendor Advisory |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| '[security bulletin] HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege,' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Red Hat update for java-1.6.0-ibm - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| '[security bulletin] HPSBMU02799 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.0x Running JD' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| APPLE-SA-2009-12-03-1 Java for Mac OS X 10.6 Update 1 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| Apple Mac OS X update for Java - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Sun Java SE November 2009 Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| '[security bulletin] HPSBMU02703 SSRT100242 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| SUSE update for java-1_6_0-sun - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityTracker.com Archives - Sun Java Runtime Environment Buffer Overflows in Processing Audio and Image Files Lets Remote Users Access Files and Gain Privileges on the Target System | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| Gentoo Linux Documentation -- Sun JDK/JRE: Multiple vulnerabilites | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Gentoo updates for sun-jre-bin, sun-jdk, blackdown-jre, blackdown-jdk, and emul-linux-x86-java - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| About the security content of Java for Mac OS X 10.6 Update 1 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| APPLE-SA-2009-12-03-2 Java for Mac OS X 10.5 Update 6 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| [security-announce] SUSE Security Announcement: Sun Java 6 (SUSE-SA:2009 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Sun Java JDK / JRE Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.