Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2009-3867

🗓️ 05 Nov 2009 16:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 115 Views

Stack-based buffer overflow in Sun Java SE allows remote attackers to execute arbitrary code via a long file: URL, aka CVE-2009-3867

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl		CVE-2009-3867
29 Oct 200900:00
–circl
checkpoint_advisories		Sun Java HsbParser.getSoundBank Stack Buffer Overflow (CVE-2009-3867)
2 Feb 201000:00
–checkpoint_advisories
cvelist		CVE-2009-3867
5 Nov 200916:00
–cvelist
exploitdb		Sun Java JRE - getSoundbank 'file://' URI Buffer Overflow (Metasploit)
20 Sep 201000:00
–exploitdb
nessus		GLSA-200911-02 : Sun JDK/JRE: Multiple vulnerabilities
18 Nov 200900:00
–nessus
nessus		Mac OS X : Java for Mac OS X 10.5 Update 6
4 Dec 200900:00
–nessus
nessus		Mac OS X : Java for Mac OS X 10.6 Update 1
4 Dec 200900:00
–nessus
nessus		RHEL 4 / 5 : java-1.6.0-sun (RHSA-2009:1560)
10 Nov 200900:00
–nessus
nessus		RHEL 4 / 5 : java-1.5.0-sun (RHSA-2009:1571)
11 Nov 200900:00
–nessus
nessus		RHEL 3 / 4 / 5 : java-1.4.2-ibm (RHSA-2009:1643)
8 Dec 200900:00
–nessus
Rows per page
NVD
Node
OR
sunjdkMatch1.5.0update_1
sunjdkMatch1.5.0update_10
sunjdkMatch1.5.0update_11
sunjdkMatch1.5.0update_12
sunjdkMatch1.5.0update_13
sunjdkMatch1.5.0update_14
sunjdkMatch1.5.0update_15
sunjdkMatch1.5.0update_16
sunjdkMatch1.5.0update_17
sunjdkMatch1.5.0update_18
sunjdkMatch1.5.0update_19
sunjdkMatch1.5.0update_2
sunjdkMatch1.5.0update_20
sunjdkMatch1.5.0update_21
sunjdkMatch1.5.0update_3
sunjdkMatch1.5.0update_4
sunjdkMatch1.5.0update_5
sunjdkMatch1.5.0update_6
sunjdkMatch1.5.0update_7
sunjdkMatch1.5.0update_8
sunjdkMatch1.5.0update_9
sunjdkMatch1.6.0update_1
sunjdkMatch1.6.0update_10
sunjdkMatch1.6.0update_11
sunjdkMatch1.6.0update_12
sunjdkMatch1.6.0update_13
sunjdkMatch1.6.0update_14
sunjdkMatch1.6.0update_15
sunjdkMatch1.6.0update_16
sunjdkMatch1.6.0update_3
sunjdkMatch1.6.0update_4
sunjdkMatch1.6.0update_5
sunjdkMatch1.6.0update_6
sunjdkMatch1.6.0update_7
sunjdkMatch1.6.0update_8
sunjdkMatch1.6.0update_9
sunjreMatch1.5.0update_1
sunjreMatch1.5.0update_11
sunjreMatch1.5.0update_12
sunjreMatch1.5.0update_13
sunjreMatch1.5.0update_14
sunjreMatch1.5.0update_15
sunjreMatch1.5.0update_16
sunjreMatch1.5.0update_17
sunjreMatch1.5.0update_18
sunjreMatch1.5.0update_19
sunjreMatch1.5.0update_2
sunjreMatch1.5.0update_20
sunjreMatch1.5.0update_21
sunjreMatch1.5.0update_3
sunjreMatch1.5.0update_4
sunjreMatch1.5.0update_5
sunjreMatch1.5.0update_6
sunjreMatch1.5.0update_7
sunjreMatch1.5.0update_8
sunjreMatch1.5.0update_9
sunjreMatch1.6.0update_1
sunjreMatch1.6.0update_10
sunjreMatch1.6.0update_11
sunjreMatch1.6.0update_12
sunjreMatch1.6.0update_13
sunjreMatch1.6.0update_14
sunjreMatch1.6.0update_15
sunjreMatch1.6.0update_16
sunjreMatch1.6.0update_2
sunjreMatch1.6.0update_3
sunjreMatch1.6.0update_4
sunjreMatch1.6.0update_5
sunjreMatch1.6.0update_6
sunjreMatch1.6.0update_7
sunjreMatch1.6.0update_8
sunjreMatch1.6.0update_9
Node
AND
OR
sunjreMatch1.4.2_1
sunjreMatch1.4.2_2
sunjreMatch1.4.2_02
sunjreMatch1.4.2_03
sunjreMatch1.4.2_3
sunjreMatch1.4.2_4
sunjreMatch1.4.2_04
sunjreMatch1.4.2_05
sunjreMatch1.4.2_5
sunjreMatch1.4.2_06
sunjreMatch1.4.2_6
sunjreMatch1.4.2_7
sunjreMatch1.4.2_07
sunjreMatch1.4.2_8
sunjreMatch1.4.2_08
sunjreMatch1.4.2_09
sunjreMatch1.4.2_9
sunjreMatch1.4.2_10
sunjreMatch1.4.2_11
sunjreMatch1.4.2_12
sunjreMatch1.4.2_13
sunjreMatch1.4.2_14
sunjreMatch1.4.2_15
sunjreMatch1.4.2_16
sunjreMatch1.4.2_17
sunjreMatch1.4.2_18
sunjreMatch1.4.2_19
sunjreMatch1.4.2_20
sunjreMatch1.4.2_21
sunjreMatch1.4.2_22
sunsdkMatch1.4.2_01
sunsdkMatch1.4.2_1
sunsdkMatch1.4.2_2
sunsdkMatch1.4.2_02
sunsdkMatch1.4.2_03
sunsdkMatch1.4.2_3
sunsdkMatch1.4.2_04
sunsdkMatch1.4.2_4
sunsdkMatch1.4.2_5
sunsdkMatch1.4.2_05
sunsdkMatch1.4.2_6
sunsdkMatch1.4.2_06
sunsdkMatch1.4.2_07
sunsdkMatch1.4.2_7
sunsdkMatch1.4.2_8
sunsdkMatch1.4.2_08
sunsdkMatch1.4.2_09
sunsdkMatch1.4.2_9
sunsdkMatch1.4.2_10
sunsdkMatch1.4.2_11
sunsdkMatch1.4.2_12
sunsdkMatch1.4.2_13
sunsdkMatch1.4.2_14
sunsdkMatch1.4.2_15
sunsdkMatch1.4.2_16
sunsdkMatch1.4.2_17
sunsdkMatch1.4.2_18
sunsdkMatch1.4.2_19
sunsdkMatch1.4.2_20
sunsdkMatch1.4.2_21
sunsdkMatch1.4.2_22
sunsolaris
Node
AND
OR
sunjreMatch1.3.1_1
sunjreMatch1.3.1_01
sunjreMatch1.3.1_01a
sunjreMatch1.3.1_02
sunjreMatch1.3.1_2
sunjreMatch1.3.1_03
sunjreMatch1.3.1_3
sunjreMatch1.3.1_4
sunjreMatch1.3.1_04
sunjreMatch1.3.1_05
sunjreMatch1.3.1_5
sunjreMatch1.3.1_06
sunjreMatch1.3.1_6
sunjreMatch1.3.1_07
sunjreMatch1.3.1_7
sunjreMatch1.3.1_8
sunjreMatch1.3.1_08
sunjreMatch1.3.1_9
sunjreMatch1.3.1_09
sunjreMatch1.3.1_10
sunjreMatch1.3.1_11
sunjreMatch1.3.1_12
sunjreMatch1.3.1_13
sunjreMatch1.3.1_14
sunjreMatch1.3.1_15
sunjreMatch1.3.1_16
sunjreMatch1.3.1_17
sunjreMatch1.3.1_18
sunjreMatch1.3.1_19
sunjreMatch1.3.1_20
sunjreMatch1.3.1_21
sunjreMatch1.3.1_22
sunjreMatch1.3.1_23
sunjreMatch1.3.1_24
sunjreMatch1.3.1_25
sunsdkMatch1.3.1_01
sunsdkMatch1.3.1_01a
sunsdkMatch1.3.1_2
sunsdkMatch1.3.1_02
sunsdkMatch1.3.1_03
sunsdkMatch1.3.1_3
sunsdkMatch1.3.1_4
sunsdkMatch1.3.1_04
sunsdkMatch1.3.1_5
sunsdkMatch1.3.1_05
sunsdkMatch1.3.1_6
sunsdkMatch1.3.1_06
sunsdkMatch1.3.1_7
sunsdkMatch1.3.1_07
sunsdkMatch1.3.1_8
sunsdkMatch1.3.1_08
sunsdkMatch1.3.1_9
sunsdkMatch1.3.1_09
sunsdkMatch1.3.1_10
sunsdkMatch1.3.1_11
sunsdkMatch1.3.1_12
sunsdkMatch1.3.1_13
sunsdkMatch1.3.1_14
sunsdkMatch1.3.1_15
sunsdkMatch1.3.1_16
sunsdkMatch1.3.1_17
sunsdkMatch1.3.1_18
sunsdkMatch1.3.1_19
sunsdkMatch1.3.1_20
sunsdkMatch1.3.1_21
sunsdkMatch1.3.1_22
sunsdkMatch1.3.1_23
sunsdkMatch1.3.1_24
sunsdkMatch1.3.1_25
microsoftwindows
Node
AND
sunjava_sebusiness
OR
sunjdkMatch1.5.0update_1
sunjdkMatch1.5.0update_10
sunjdkMatch1.5.0update_11
sunjdkMatch1.5.0update_12
sunjdkMatch1.5.0update_13
sunjdkMatch1.5.0update_14
sunjdkMatch1.5.0update_15
sunjdkMatch1.5.0update_16
sunjdkMatch1.5.0update_17
sunjdkMatch1.5.0update_18
sunjdkMatch1.5.0update_19
sunjdkMatch1.5.0update_2
sunjdkMatch1.5.0update_20
sunjdkMatch1.5.0update_21
sunjdkMatch1.5.0update_3
sunjdkMatch1.5.0update_4
sunjdkMatch1.5.0update_5
sunjdkMatch1.5.0update_6
sunjdkMatch1.5.0update_7
sunjdkMatch1.5.0update_8
sunjdkMatch1.5.0update_9
sunjdkMatch1.6.0update_1
sunjdkMatch1.6.0update_10
sunjdkMatch1.6.0update_11
sunjdkMatch1.6.0update_12
sunjdkMatch1.6.0update_13
sunjdkMatch1.6.0update_14
sunjdkMatch1.6.0update_15
sunjdkMatch1.6.0update_16
sunjdkMatch1.6.0update_3
sunjdkMatch1.6.0update_4
sunjdkMatch1.6.0update_5
sunjdkMatch1.6.0update_6
sunjdkMatch1.6.0update_7
sunjdkMatch1.6.0update_8
sunjdkMatch1.6.0update_9
sunjdkMatch1.6.0update2
sunjreMatch1.4.2_01
sunjreMatch1.4.2_1
sunjreMatch1.4.2_2
sunjreMatch1.4.2_02
sunjreMatch1.4.2_03
sunjreMatch1.4.2_3
sunjreMatch1.4.2_4
sunjreMatch1.4.2_04
sunjreMatch1.4.2_05
sunjreMatch1.4.2_5
sunjreMatch1.4.2_06
sunjreMatch1.4.2_6
sunjreMatch1.4.2_7
sunjreMatch1.4.2_07
sunjreMatch1.4.2_8
sunjreMatch1.4.2_08
sunjreMatch1.4.2_09
sunjreMatch1.4.2_9
sunjreMatch1.4.2_10
sunjreMatch1.4.2_11
sunjreMatch1.4.2_12
sunjreMatch1.4.2_13
sunjreMatch1.4.2_14
sunjreMatch1.4.2_15
sunjreMatch1.4.2_16
sunjreMatch1.4.2_17
sunjreMatch1.4.2_18
sunjreMatch1.4.2_19
sunjreMatch1.4.2_20
sunjreMatch1.4.2_21
sunjreMatch1.4.2_22
sunjreMatch1.5.0update_1
sunjreMatch1.5.0update_11
sunjreMatch1.5.0update_12
sunjreMatch1.5.0update_13
sunjreMatch1.5.0update_14
sunjreMatch1.5.0update_15
sunjreMatch1.5.0update_16
sunjreMatch1.5.0update_17
sunjreMatch1.5.0update_18
sunjreMatch1.5.0update_19
sunjreMatch1.5.0update_2
sunjreMatch1.5.0update_20
sunjreMatch1.5.0update_21
sunjreMatch1.5.0update_3
sunjreMatch1.5.0update_4
sunjreMatch1.5.0update_5
sunjreMatch1.5.0update_6
sunjreMatch1.5.0update_7
sunjreMatch1.5.0update_8
sunjreMatch1.5.0update_9
sunjreMatch1.6.0update_1
sunjreMatch1.6.0update_10
sunjreMatch1.6.0update_11
sunjreMatch1.6.0update_12
sunjreMatch1.6.0update_13
sunjreMatch1.6.0update_14
sunjreMatch1.6.0update_15
sunjreMatch1.6.0update_16
sunjreMatch1.6.0update_2
sunjreMatch1.6.0update_3
sunjreMatch1.6.0update_4
sunjreMatch1.6.0update_5
sunjreMatch1.6.0update_6
sunjreMatch1.6.0update_7
sunjreMatch1.6.0update_8
sunjreMatch1.6.0update_9
sunsdkMatch1.4.2_1
sunsdkMatch1.4.2_2
sunsdkMatch1.4.2_02
sunsdkMatch1.4.2_03
sunsdkMatch1.4.2_3
sunsdkMatch1.4.2_04
sunsdkMatch1.4.2_4
sunsdkMatch1.4.2_5
sunsdkMatch1.4.2_05
sunsdkMatch1.4.2_6
sunsdkMatch1.4.2_06
sunsdkMatch1.4.2_07
sunsdkMatch1.4.2_7
sunsdkMatch1.4.2_8
sunsdkMatch1.4.2_08
sunsdkMatch1.4.2_09
sunsdkMatch1.4.2_9
sunsdkMatch1.4.2_10
sunsdkMatch1.4.2_11
sunsdkMatch1.4.2_12
sunsdkMatch1.4.2_13
sunsdkMatch1.4.2_14
sunsdkMatch1.4.2_15
sunsdkMatch1.4.2_16
sunsdkMatch1.4.2_17
sunsdkMatch1.4.2_18
sunsdkMatch1.4.2_19
sunsdkMatch1.4.2_20
sunsdkMatch1.4.2_21
sunsdkMatch1.4.2_22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 23:12Current
7.7High risk
Vulners AI Score7.7
CVSS 29.3
EPSS0.73376
CWE-119
cve-2009-3867stack-based buffer overflowsun java seremote code executionurlcve
115