CVE-2009-3881 Information disclosure in n/a
Remote attackers can gain privileges via an information leak in the Java ClassLoader mechanism, affecting Java SE and OpenJDK users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-3881?
CVE-2009-3881 is a high-severity vulnerability in Sun Jre, published on 9 Nov 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
Weakness: CWE-200
Which versions are affected by CVE-2009-3881?
It affects 2 products.
Products include Sun Jre, Sun Openjdk.
How do I fix CVE-2009-3881?
Upgrade to a fixed version.
Is CVE-2009-3881 being exploited?
There is no known exploitation of CVE-2009-3881 in the wild and no public exploit code.
Other vulnerabilities in Sun Jre
Sources
Also known as GHSA-f9mh-6367-45hp.