Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-3873
HistoryNov 05, 2009 - 12:00 a.m.

CVE-2009-3873

2009-11-0500:00:00
ubuntu.com
ubuntu.com
16

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.021

Percentile

89.1%

The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22,
JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24
allows remote attackers to gain privileges via a crafted image file,
related to a “quantization problem,” aka Bug Id 6862968.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenjdk-6< 6b18-1.8.2-4ubuntu1~8.04.1UNKNOWN
ubuntu8.10noarchopenjdk-6< 6b12-0ubuntu6.6UNKNOWN
ubuntu9.04noarchopenjdk-6< 6b14-1.4.1-0ubuntu12UNKNOWN
ubuntu9.10noarchopenjdk-6< 6b16-1.6.1-3ubuntu1UNKNOWN
ubuntu8.04noarchsun-java6< 6.20dlj-0ubuntu1.8.04UNKNOWN
ubuntu9.04noarchsun-java6< 6.20dlj-0ubuntu1.9.04UNKNOWN
ubuntu9.10noarchsun-java6< 6.20dlj-0ubuntu1.9.10UNKNOWN
ubuntu10.04noarchsun-java6< 6.20dlj-1ubuntu3UNKNOWN

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.021

Percentile

89.1%