CVE-2009-3884 : Detail

CVE-2009-3884

0.74%V3
Network
2009-11-09
18h00 +00:00
2017-09-18
10h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5 AV:N/AC:L/Au:N/C:P/I:N/A:N nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Sun>>Jre >> Version To (including) 1.5.0

    Sun>>Jre >> Version To (including) 1.6.0

    Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

        Sun>>Jre >> Version 1.5.0

          Sun>>Jre >> Version 1.5.0

            Sun>>Jre >> Version 1.5.0

              Sun>>Jre >> Version 1.5.0

                Sun>>Jre >> Version 1.5.0

                  Sun>>Jre >> Version 1.5.0

                    Sun>>Jre >> Version 1.5.0

                      Sun>>Jre >> Version 1.5.0

                        Sun>>Jre >> Version 1.5.0

                          Sun>>Jre >> Version 1.5.0

                            Sun>>Jre >> Version 1.5.0

                              Sun>>Jre >> Version 1.5.0

                                Sun>>Jre >> Version 1.5.0

                                  Sun>>Jre >> Version 1.5.0

                                    Sun>>Jre >> Version 1.5.0

                                      Sun>>Jre >> Version 1.5.0

                                        Sun>>Jre >> Version 1.5.0

                                          Sun>>Jre >> Version 1.5.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                          Sun>>Jre >> Version 1.6.0

                                            Sun>>Jre >> Version 1.6.0

                                            Sun>>Openjdk >> Version *

                                              References

                                              http://support.apple.com/kb/HT3970
                                              Tags : x_refsource_CONFIRM
                                              http://support.apple.com/kb/HT3969
                                              Tags : x_refsource_CONFIRM
                                              http://security.gentoo.org/glsa/glsa-200911-02.xml
                                              Tags : vendor-advisory, x_refsource_GENTOO
                                              http://secunia.com/advisories/37581
                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                              http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
                                              Tags : vendor-advisory, x_refsource_MANDRIVA
                                              http://secunia.com/advisories/37386
                                              Tags : third-party-advisory, x_refsource_SECUNIA