5

CVE-2009-3880

The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Jre Update update_21 Version <= 1.5.0
Sun ≫ Jre Update update_16 Version <= 1.6.0
Sun ≫ Jre Version 1.5.0 Update update_1
Sun ≫ Jre Version 1.5.0 Update update_11
Sun ≫ Jre Version 1.5.0 Update update_12
Sun ≫ Jre Version 1.5.0 Update update_13
Sun ≫ Jre Version 1.5.0 Update update_14
Sun ≫ Jre Version 1.5.0 Update update_15
Sun ≫ Jre Version 1.5.0 Update update_16
Sun ≫ Jre Version 1.5.0 Update update_17
Sun ≫ Jre Version 1.5.0 Update update_18
Sun ≫ Jre Version 1.5.0 Update update_19
Sun ≫ Jre Version 1.5.0 Update update_2
Sun ≫ Jre Version 1.5.0 Update update_20
Sun ≫ Jre Version 1.5.0 Update update_3
Sun ≫ Jre Version 1.5.0 Update update_4
Sun ≫ Jre Version 1.5.0 Update update_5
Sun ≫ Jre Version 1.5.0 Update update_6
Sun ≫ Jre Version 1.5.0 Update update_7
Sun ≫ Jre Version 1.5.0 Update update_8
Sun ≫ Jre Version 1.5.0 Update update_9
Sun ≫ Jre Version 1.5.0 Update update10
Sun ≫ Jre Version 1.6.0 Update update_1
Sun ≫ Jre Version 1.6.0 Update update_10
Sun ≫ Jre Version 1.6.0 Update update_11
Sun ≫ Jre Version 1.6.0 Update update_12
Sun ≫ Jre Version 1.6.0 Update update_13
Sun ≫ Jre Version 1.6.0 Update update_14
Sun ≫ Jre Version 1.6.0 Update update_15
Sun ≫ Jre Version 1.6.0 Update update_2
Sun ≫ Jre Version 1.6.0 Update update_3
Sun ≫ Jre Version 1.6.0 Update update_4
Sun ≫ Jre Version 1.6.0 Update update_5
Sun ≫ Jre Version 1.6.0 Update update_6
Sun ≫ Jre Version 1.6.0 Update update_7
Sun ≫ Jre Version 1.6.0 Update update_8
Sun ≫ Jre Version 1.6.0 Update update_9
Sun ≫ Openjdk
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.79% 0.755
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/37386
http://security.gentoo.org/glsa/glsa-200911-02.xml
http://java.sun.com/j2se/1.5.0/ReleaseNotes.html
Vendor Advisory
http://java.sun.com/javase/6/webnotes/6u17.html
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
https://bugzilla.redhat.com/show_bug.cgi?id=530296
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10761
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7316