CVE-2009-3885

Published: 09 November 2009

Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445.

Priority

Low

Status

Package Release Status
openjdk-6
Launchpad, Ubuntu, Debian
Upstream
Released (6b17)
sun-java5
Launchpad, Ubuntu, Debian
Upstream
Released (1.5.0-22)
sun-java6
Launchpad, Ubuntu, Debian
Upstream
Released (6.17)