Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3869 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:49.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - https://oval.cisecurity.org/repository
gram Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11262 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10741 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - https://oval.cisecurit
e.oval%3Adef%3A10741 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8566 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7400 - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytracker.com/id?1023132 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1 - http://zerodayinitiative.com/advisories/ZDI-09-078/ - http://www.vupen.com/english/advi
ment.do?assetkey=1-66-270474-1 - http://zerodayinitiative.com/advisories/ZDI-09-078/ - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://secunia.com/advisories/37239 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3870 State: REJECTED Published: 2009-06-01T20:00:00Z Last Updated: 2024-09-16T19:10:27.005Z Description: No description available.
CVE ID: CVE-2009-3871 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - https://oval.cisecurity.org/repositor
ogram Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9360 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - https://oval.cisecurity.org
- http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12134 - http://securitytracker.com/id?1023132 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6698 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1 - http://zerodayinitiative.com/advisories/ZDI-09-079/ - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html -
www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8275 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://secunia.com/advisories/37239 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3872 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=1342548666
- http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6963 - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytracker.com/id?1023132 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.ope
31534&w=2 - http://securitytracker.com/id?1023132 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11715 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1 - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8475 - http://secunia.com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/ja
com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://secunia.com/advisories/37239 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3873 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.
com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9602 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8396 - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytracker.com/id?1023132 - h
nia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytracker.com/id?1023132 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1 - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6970 - http://secunia.com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html -
//www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11746 - http://secunia.com/advisories/37239 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3874 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://supp
: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://zerodayinitiative.com/advisories/ZDI-09-080/ - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8603 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=1265668241
ecurity-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytracker.com/id?1023132 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1 - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11566 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12057 - http://secunia
%3A11566 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12057 - http://secunia.com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7442 - http://secunia.com/advisories/37239 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3875 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - h
. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12112 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7549 - http://lists.apple.com/archives/security-announce/2009/Dec/ms
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7549 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://secunia.com/
84891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://secunia.com/advisories/37239 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11847 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7913 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270475-1
CVE ID: CVE-2009-3876 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 -
am Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8608 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10328 - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensu
/?l=bugtraq&m=126566824131534&w=2 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6805 - http://www.vupen.com/english/advisories/2009/3131 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11934 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1 - http://secunia.com/advisories/37239 - http://www.mandriva.com/s
olve.sun.com/search/document.do?assetkey=1-66-270476-1 - http://secunia.com/advisories/37239 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3877 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - htt
ontainer: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://support.apple.com/kb/HT3969 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7148 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - https://oval.cisecurity.org/reposi
l=bugtraq&m=126566824131534&w=2 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10469 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1 - https://oval.cisecurity.org/repository/search/
841 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12232 - http://secunia.com/advisories/37239 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8330
CVE ID: CVE-2009-3878 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd_sjws module in VulnDisco Pack Professional 8.12. NOTE: as of 20091105, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.intevydis.com/blog/?p=79 - https://exchange.xforce.ibmcloud.com/vu
es: - CVE Program Container: References: - http://www.intevydis.com/blog/?p=79 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54065 - http://www.osvdb.org/59497 - http://www.h-online.com/security/news/item/Alleged-critical-vulnerability-in-Sun-Java-System-Web-Server-839598.html - http://www.vupen.com/english/advisories/2009/3024 - http://secunia.com/advisories/37115 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3879 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:50.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7545 - http://security.gentoo.org/glsa/glsa-200911-02.xml - https://
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7545 - http://security.gentoo.org/glsa/glsa-200911-02.xml - https://bugzilla.redhat.com/show_bug.cgi?id=530297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9568 - http://java.sun.com/javase/6/webnotes/6u17.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3880 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:50.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
t Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10761 - http://security.gentoo.org/glsa/glsa-200911-02.xml - https://bugzilla.redhat.com/show_bug.cgi?id=530296 - http://java.sun.com/javase/6/webnotes/6u17.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386