Information Disclosure Vulnerability in Java Runtime Environment by Sun Microsystems
CVE-2009-3880

Currently unrated

Key Information:

Vendor

Oracle
Status
Jre
Openjdk
Vendor
CVE Published:
9 November 2009

What is CVE-2009-3880?

The Abstract Window Toolkit (AWT) in the Java Runtime Environment (JRE) does not adequately restrict the objects sent to loggers. This flaw enables attackers to potentially access sensitive information through specific vectors related to Component, KeyboardFocusManager, and DefaultKeyboardFocusManager functions.

References

https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
http://security.gentoo.org/glsa/glsa-200911-02.xml
vendor-advisoryx_refsource_GENTOO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2009-3880 : Information Disclosure Vulnerability in Java Runtime Environment by Sun Microsystems