ID CVE-2009-3876
Summary Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*
  • cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*
    cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
  • cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
    cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*
    cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*
    cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
oval via4
  • accepted 2013-04-29T04:04:42.241-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 5
      oval oval:org.mitre.oval:def:11414
    • comment The operating system installed on the system is CentOS Linux 5.x
      oval oval:org.mitre.oval:def:15802
    • comment Oracle Linux 5.x
      oval oval:org.mitre.oval:def:15459
    description Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
    family unix
    id oval:org.mitre.oval:def:10328
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
    version 18
  • accepted 2015-04-20T04:00:13.148-04:00
    class vulnerability
    contributors
    • name Aslesha Nargolkar
      organization Hewlett-Packard
    • name Sushant Kumar Singh
      organization Hewlett-Packard
    • name Sushant Kumar Singh
      organization Hewlett-Packard
    • name Prashant Kumar
      organization Hewlett-Packard
    • name Mike Cokus
      organization The MITRE Corporation
    description Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
    family unix
    id oval:org.mitre.oval:def:11934
    status accepted
    submitted 2010-10-27T13:02:54.000-05:00
    title HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
    version 44
  • accepted 2014-01-20T04:01:29.821-05:00
    class vulnerability
    contributors
    • name J. Daniel Brown
      organization DTCC
    • name Chris Coffin
      organization The MITRE Corporation
    definition_extensions
    comment VMware ESX Server 4.0 is installed
    oval oval:org.mitre.oval:def:6293
    description Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
    family unix
    id oval:org.mitre.oval:def:6805
    status accepted
    submitted 2010-06-01T17:30:00.000-05:00
    title OpenJDK ASN.1/DER Input Stream Parser Denial of Service via Crafted DER Encoded Data
    version 8
  • accepted 2015-04-20T04:02:40.996-04:00
    class vulnerability
    contributors
    • name Pai Peng
      organization Hewlett-Packard
    • name Sushant Kumar Singh
      organization Hewlett-Packard
    • name Sushant Kumar Singh
      organization Hewlett-Packard
    • name Prashant Kumar
      organization Hewlett-Packard
    • name Mike Cokus
      organization The MITRE Corporation
    description Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
    family unix
    id oval:org.mitre.oval:def:8608
    status accepted
    submitted 2010-03-22T17:00:25.000-04:00
    title HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities
    version 43
redhat via4
advisories
rhsa
id RHSA-2009:1694
rpms
  • java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5
  • java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5
  • java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5
  • java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5
  • java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5
refmap via4
bid 36881
confirm
gentoo GLSA-200911-02
hp
  • HPSBMU02703
  • HPSBMU02799
  • HPSBUX02503
  • SSRT100019
  • SSRT100242
mandriva MDVSA-2010:084
secunia
  • 37231
  • 37239
  • 37386
  • 37841
sunalert 270476
suse SUSE-SA:2009:058
vupen ADV-2009-3131
saint via4
  • bid 36881
    description Java Runtime Environment AWT setDiffICM buffer overflow
    id web_client_jre
    osvdb 59710
    title jre_awt_setdifficm
    type client
  • bid 36881
    description Java Runtime Environment HsbParser.getSoundBank Stack Buffer Overflow
    osvdb 59711
    title jre_hsbparser_getsoundbank
    type client
Last major update 30-10-2018 - 16:26
Published 05-11-2009 - 16:30
Back to Top