CVE-2009-3885

Published: Nov 9, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445.

Affected (38)

Products: Sun: Jre

Sun

1 product

Jre

Configuration A

38 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sun Jre	Up to 1.6.0
Sun Jre	Up to 1.5.0
Sun Jre	Version 1.5.0 update_11
Sun Jre	Version 1.5.0 update_12
Sun Jre	Version 1.5.0 update_13
Sun Jre	Version 1.5.0 update_14
Sun Jre	Version 1.5.0 update_15
Sun Jre	Version 1.5.0 update_16
Sun Jre	Version 1.5.0 update_17
Sun Jre	Version 1.5.0 update_18
Sun Jre	Version 1.5.0 update_19
Sun Jre	Version 1.5.0 update_1
Sun Jre	Version 1.5.0 update_20
Sun Jre	Version 1.5.0 update_2
Sun Jre	Version 1.5.0 update_3
Sun Jre	Version 1.5.0 update_4
Sun Jre	Version 1.5.0 update_5
Sun Jre	Version 1.5.0 update_6
Sun Jre	Version 1.5.0 update_7
Sun Jre	Version 1.5.0 update_8
Sun Jre	Version 1.5.0 update_9
Sun Jre	Version 1.6.0 update_10
Sun Jre	Version 1.6.0 update_11
Sun Jre	Version 1.6.0 update_12
Sun Jre	Version 1.6.0 update_13
Sun Jre	Version 1.6.0 update_14
Sun Jre	Version 1.6.0 update_15
Sun Jre	Version 1.6.0 update_1
Sun Jre	Version 1.6.0 update_2
Sun Jre	Version 1.6.0 update_3
Sun Jre	Version 1.6.0 update_4
Sun Jre	Version 1.6.0 update_5
Sun Jre	Version 1.6.0 update_6
Sun Jre	Version 1.6.0 update_7
Sun Jre	Version 1.6.0 update_8
Sun Jre	Version 1.6.0 update_9
Sun Jre	Version 1.6.0_0
Sun Jre	Version 1.6.0_10