Information Disclosure Vulnerability in Java Runtime Environment by Sun Microsystems
CVE-2009-3880

Currently unrated

Key Information:

Vendor
Oracle
Status
Jre
Openjdk
Vendor
CVE Published:
9 November 2009

Summary

The Abstract Window Toolkit (AWT) in the Java Runtime Environment (JRE) does not adequately restrict the objects sent to loggers. This flaw enables attackers to potentially access sensitive information through specific vectors related to Component, KeyboardFocusManager, and DefaultKeyboardFocusManager functions.

References

https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
http://security.gentoo.org/glsa/glsa-200911-02.xml
vendor-advisoryx_refsource_GENTOO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.