NetSight
IP …
critical9.3

CVE-2009-3872

Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before…

Impact

Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.

Affected products

VendorProductAffected versions
SunJdk
Versions 1.5.0, 1.6.0
SunJre
Versions 1.5.0, 1.6.0, 1.4.2_1, 1.4.2_2, 1.4.2_02, 1.4.2_03
SunSdk
Versions 1.4.2_01, 1.4.2_1, 1.4.2_2, 1.4.2_02, 1.4.2_03, 1.4.2_3

References