Home > Vulnerability Database > CVE-2009-3877

Mend.io Vulnerability Database

CVE-2009-3877

Date: November 5, 2009

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.

Severity Score

5.3

Related Resources (27)

Url: http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html

Url: http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html

Url: http://secunia.com/advisories/37386

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-3877

Url: http://www.securityfocus.com/bid/36881

Url: http://www.vupen.com/english/advisories/2009/3131

Url: http://secunia.com/advisories/37841

Url: https://access.redhat.com/security/cve/CVE-2009-3877

Url: http://support.apple.com/kb/HT3970

Url: http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html

Url: http://secunia.com/advisories/37239

Url: http://marc.info/?l=bugtraq&m=126566824131534&w=2

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:084

Url: http://www.redhat.com/support/errata/RHSA-2009-1694.html

Url: http://security.gentoo.org/glsa/glsa-200911-02.xml

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12232

Url: http://secunia.com/advisories/37231

Url: http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8330

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7148

Url: http://java.sun.com/javase/6/webnotes/6u17.html

Url: http://marc.info/?l=bugtraq&m=131593453929393&w=2

Url: http://secunia.com/advisories/37581

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10469

Url: http://support.apple.com/kb/HT3969

Url: https://www.mend.io/vulnerability-database/CVE-2009-3877

Severity Score

5.3

Weakness Type (CWE)

Resource Management Errors

CWE-399

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-3877

Date: November 5, 2009

Severity Score

Related Resources (27)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?