CVE-2009-3885

2009-11-0900:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.3%

JSON

Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows
remote attackers to cause a denial of service via a BMP file containing a
link to a UNC share pathname for an International Color Consortium (ICC)
profile file, probably a related issue to CVE-2007-2789, aka Bug Id
6632445.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenjdk-6< 6b18-1.8.2-4ubuntu1~8.04.1UNKNOWN
ubuntu8.10noarchopenjdk-6< 6b12-0ubuntu6.6UNKNOWN
ubuntu9.04noarchopenjdk-6< 6b14-1.4.1-0ubuntu12UNKNOWN
ubuntu9.10noarchopenjdk-6< 6b16-1.6.1-3ubuntu1UNKNOWN
ubuntu8.04noarchsun-java6< 6.20dlj-0ubuntu1.8.04UNKNOWN
ubuntu9.04noarchsun-java6< 6.20dlj-0ubuntu1.9.04UNKNOWN
ubuntu9.10noarchsun-java6< 6.20dlj-0ubuntu1.9.10UNKNOWN
ubuntu10.04noarchsun-java6< 6.20dlj-1ubuntu3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	openjdk-6	< 6b18-1.8.2-4ubuntu1~8.04.1	UNKNOWN
ubuntu	8.10	noarch	openjdk-6	< 6b12-0ubuntu6.6	UNKNOWN
ubuntu	9.04	noarch	openjdk-6	< 6b14-1.4.1-0ubuntu12	UNKNOWN
ubuntu	9.10	noarch	openjdk-6	< 6b16-1.6.1-3ubuntu1	UNKNOWN
ubuntu	8.04	noarch	sun-java6	< 6.20dlj-0ubuntu1.8.04	UNKNOWN
ubuntu	9.04	noarch	sun-java6	< 6.20dlj-0ubuntu1.9.04	UNKNOWN
ubuntu	9.10	noarch	sun-java6	< 6.20dlj-0ubuntu1.9.10	UNKNOWN
ubuntu	10.04	noarch	sun-java6	< 6.20dlj-1ubuntu3	UNKNOWN