← Database

CVE-2009-3881

HIGH CVSS: 7.5 Published: 2009-11-09 Modified: 2026-06-16

Description

Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.

Affected Platforms

Sun JreSun Openjdk

Weakness Type

CWE-200

References