CVE-2009-3868

java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)

Published Nov 5, 2009 CVSS 2.0 · 9.3 Critical EPSS 4.2% KEV · Not listed
Description
Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:45 AM
Reserved
Nov 5, 2009, 12:00 AM
Status
Modified
Published
Nov 5, 2009, 4:30 PM
Modified
Jun 16, 2026, 11:12 PM
Severity
Important
Public date
Nov 3, 2009, 12:00 AM