CVE-2009-3882: Infoleak

Published Oct 21, 2009
·
Updated

Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026.

Affected Software

84 affected componentsFixes available
redhat/java<1.6.0-sun-1:1.6.0.17-1jpp.1.el4
1.6.0-sun-1:1.6.0.17-1jpp.1.el4
redhat/java<1.5.0-sun-0:1.5.0.22-1jpp.1.el4
1.5.0-sun-0:1.5.0.22-1jpp.1.el4
redhat/java<1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5
1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5
redhat/java<1.6.0-sun-1:1.6.0.17-1jpp.2.el5
1.6.0-sun-1:1.6.0.17-1jpp.2.el5
redhat/java<1.5.0-sun-0:1.5.0.22-1jpp.1.el5
1.5.0-sun-0:1.5.0.22-1jpp.1.el5
Sun OpenJDK
Sun JRE<=1.5.0
Sun JRE=1.5.0
Sun JRE=1.5.0-update1
Sun JRE=1.5.0-update10
Sun JRE=1.5.0-update11
Sun JRE=1.5.0-update12
Sun JRE=1.5.0-update13
Sun JRE=1.5.0-update14
Sun JRE=1.5.0-update15
Sun JRE=1.5.0-update16
Sun JRE=1.5.0-update17
Sun JRE=1.5.0-update18
Sun JRE=1.5.0-update19
Sun JRE=1.5.0-update2
Sun JRE=1.5.0-update20
Sun JRE=1.5.0-update3
Sun JRE=1.5.0-update4
Sun JRE=1.5.0-update5
Sun JRE=1.5.0-update6
Sun JRE=1.5.0-update7
Sun JRE=1.5.0-update8
Sun JRE=1.5.0-update9
Sun JRE<=1.6.0
Sun JRE=1.6.0
Sun JRE=1.6.0-update_1
Sun JRE=1.6.0-update_2
Sun JRE=1.6.0-update_3
Sun JRE=1.6.0-update10
Sun JRE=1.6.0-update11
Sun JRE=1.6.0-update12
Sun JRE=1.6.0-update13
Sun JRE=1.6.0-update14
Sun JRE=1.6.0-update15
Sun JRE=1.6.0-update4
Sun JRE=1.6.0-update5
Sun JRE=1.6.0-update6
Sun JRE=1.6.0-update7
Sun JRE=1.6.0-update8
Sun JRE=1.6.0-update9
Sun JDK<=1.5.0
Sun JDK=1.5.0
Sun JDK=1.5.0-update1
Sun JDK=1.5.0-update10
Sun JDK=1.5.0-update11
Sun JDK=1.5.0-update12
Sun JDK=1.5.0-update13
Sun JDK=1.5.0-update14
Sun JDK=1.5.0-update15
Sun JDK=1.5.0-update16
Sun JDK=1.5.0-update17
Sun JDK=1.5.0-update18
Sun JDK=1.5.0-update19
Sun JDK=1.5.0-update2
Sun JDK=1.5.0-update20
Sun JDK=1.5.0-update3
Sun JDK=1.5.0-update4
Sun JDK=1.5.0-update5
Sun JDK=1.5.0-update6
Sun JDK=1.5.0-update7
Sun JDK=1.5.0-update8
Sun JDK=1.5.0-update9
Sun JDK<=1.6.0
Sun JDK=1.6.0
Sun JDK=1.6.0-update1
Sun JDK=1.6.0-update10
Sun JDK=1.6.0-update11
Sun JDK=1.6.0-update12
Sun JDK=1.6.0-update13
Sun JDK=1.6.0-update14
Sun JDK=1.6.0-update15
Sun JDK=1.6.0-update2
Sun JDK=1.6.0-update3
Sun JDK=1.6.0-update4
Sun JDK=1.6.0-update5
Sun JDK=1.6.0-update6
Sun JDK=1.6.0-update7
Sun JDK=1.6.0-update8
Sun JDK=1.6.0-update9

Event History

Oct 21, 2009
Data Sourced
via Red Hat·07:21 PM
DescriptionSeverityAffected Software
Nov 3, 2009
CVE Published
via Red Hat·12:00 AM
Nov 9, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2009-3882?

The severity of CVE-2009-3882 is not explicitly assigned, but it involves multiple unspecified vulnerabilities with potential impact.

2

How do I fix CVE-2009-3882?

To fix CVE-2009-3882, update to the latest versions of Sun Java SE, specifically 5.0 Update 22 or later and 6 Update 17 or later.

3

What products are affected by CVE-2009-3882?

CVE-2009-3882 affects Sun Java SE 5.0 before Update 22, Sun Java SE 6 before Update 17, and OpenJDK.

4

Can CVE-2009-3882 lead to remote attacks?

Yes, CVE-2009-3882 has unknown remote attack vectors associated with the vulnerabilities.

5

What is meant by 'information leaks in mutable variables' in CVE-2009-3882?

The phrase 'information leaks in mutable variables' in CVE-2009-3882 refers to vulnerabilities that may allow unauthorized data exposure.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203