CVE-2009-3879 Other in n/a

High 7.5 Published Updated

Unspecified vulnerabilities in Sun Java SE graphics subsystems allow potential exploitation via malicious applets or applications.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
Available

What is CVE-2009-3879?

CVE-2009-3879 is a high-severity vulnerability in Sun Jre, published on 9 Nov 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.

Which versions are affected by CVE-2009-3879?

It affects 2 products.

Products include Sun Jre, Sun Openjdk.

How do I fix CVE-2009-3879?

Upgrade to a fixed version.

Is CVE-2009-3879 being exploited?

There is no known exploitation of CVE-2009-3879 in the wild and no public exploit code.

All Sun Jre vulnerabilities

Sources

Also known as GHSA-j25w-hjf5-jg7g.

Is CVE-2009-3879 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free