Severe Denial of Service Vulnerability in Sun Java SE by Oracle
CVE-2009-3876

Currently unrated

Key Information:

Vendor

Oracle
Status
Jdk
Jre
Sdk
Vendor
CVE Published:
5 November 2009

What is CVE-2009-3876?

A vulnerability exists in Sun Java SE that allows remote attackers to exploit memory consumption through crafted DER encoded data. This occurs when the ASN.1 DER input stream parser fails to decode the data correctly, leading to potential service interruptions.

References

http://marc.info/?l=bugtraq&m=126566824131534&w=2
vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/36881
vdb-entryx_refsource_BID
http://marc.info/?l=bugtraq&m=134254866602253&w=2
vendor-advisoryx_refsource_HP

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.