Approved changes feed: RSS · Atom
cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*
part: a version: 1.5.0 update: update_4
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Jre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-3885 |
vulnerable | 2026-06-08 04:51:44.910778 |
Details available
Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:51.071Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3884 |
vulnerable | 2026-06-08 04:51:44.909716 |
Details available
The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:50.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3881 |
vulnerable | 2026-06-08 04:51:44.885456 |
Details available
Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:50.425Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3880 |
vulnerable | 2026-06-08 04:51:44.884298 |
Details available
The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:50.096Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3879 |
vulnerable | 2026-06-08 04:51:44.883135 |
Details available
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:50.627Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3874 |
vulnerable | 2026-06-08 04:51:44.696464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3873 |
vulnerable | 2026-06-08 04:51:44.690715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3872 |
vulnerable | 2026-06-08 04:51:44.685057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3871 |
vulnerable | 2026-06-08 04:51:44.679047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3869 |
vulnerable | 2026-06-08 04:51:44.673204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3868 |
vulnerable | 2026-06-08 04:51:44.667374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3867 |
vulnerable | 2026-06-08 04:51:44.590292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3729 |
vulnerable | 2026-06-08 04:51:44.046672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.