CVE-2009-3728

2009-11-0900:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

80.2%

JSON

Directory traversal vulnerability in the ICC_Profile.getInstance method in
Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6
before Update 17, and OpenJDK, allows remote attackers to determine the
existence of local International Color Consortium (ICC) profile files via a
… (dot dot) in a pathname, aka Bug Id 6631533.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenjdk-6< 6b18-1.8.2-4ubuntu1~8.04.1UNKNOWN
ubuntu8.10noarchopenjdk-6< 6b12-0ubuntu6.6UNKNOWN
ubuntu9.04noarchopenjdk-6< 6b14-1.4.1-0ubuntu12UNKNOWN
ubuntu9.10noarchopenjdk-6< 6b16-1.6.1-3ubuntu1UNKNOWN
ubuntu8.04noarchsun-java6< 6.20dlj-0ubuntu1.8.04UNKNOWN
ubuntu9.04noarchsun-java6< 6.20dlj-0ubuntu1.9.04UNKNOWN
ubuntu9.10noarchsun-java6< 6.20dlj-0ubuntu1.9.10UNKNOWN
ubuntu10.04noarchsun-java6< 6.20dlj-1ubuntu3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	openjdk-6	< 6b18-1.8.2-4ubuntu1~8.04.1	UNKNOWN
ubuntu	8.10	noarch	openjdk-6	< 6b12-0ubuntu6.6	UNKNOWN
ubuntu	9.04	noarch	openjdk-6	< 6b14-1.4.1-0ubuntu12	UNKNOWN
ubuntu	9.10	noarch	openjdk-6	< 6b16-1.6.1-3ubuntu1	UNKNOWN
ubuntu	8.04	noarch	sun-java6	< 6.20dlj-0ubuntu1.8.04	UNKNOWN
ubuntu	9.04	noarch	sun-java6	< 6.20dlj-0ubuntu1.9.04	UNKNOWN
ubuntu	9.10	noarch	sun-java6	< 6.20dlj-0ubuntu1.9.10	UNKNOWN
ubuntu	10.04	noarch	sun-java6	< 6.20dlj-1ubuntu3	UNKNOWN