CVE-2009-3883
N/A
Published: November 9, 2009 at 07:00 PM UTC
Updated: June 16, 2026 at 11:12 PM UTC
3 products affected across 1 vendorJREJDKOpenjdk
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.5.0v ≤ 1.6.01.5.01.5.0 update11.5.0 update101.5.0 update111.5.0 update121.5.0 update131.5.0 update141.5.0 update151.5.0 update161.5.0 update171.5.0 update181.5.0 update191.5.0 update21.5.0 update201.5.0 update31.5.0 update41.5.0 update51.5.0 update61.5.0 update71.5.0 update81.5.0 update91.6.01.6.0 update11.6.0 update101.6.0 update111.6.0 update121.6.0 update131.6.0 update141.6.0 update151.6.0 update21.6.0 update31.6.0 update41.6.0 update51.6.0 update61.6.0 update71.6.0 update81.6.0 update9update16update21
v ≤ 1.5.0v ≤ 1.6.01.5.01.5.0 update11.5.0 update101.5.0 update111.5.0 update121.5.0 update131.5.0 update141.5.0 update151.5.0 update161.5.0 update171.5.0 update181.5.0 update191.5.0 update21.5.0 update201.5.0 update31.5.0 update41.5.0 update51.5.0 update61.5.0 update71.5.0 update81.5.0 update91.6.01.6.0 update101.6.0 update111.6.0 update121.6.0 update131.6.0 update141.6.0 update151.6.0 update41.6.0 update51.6.0 update61.6.0 update71.6.0 update81.6.0 update91.6.0 update_11.6.0 update_21.6.0 update_3update16update21
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://java.sun.com/j2se/1.5.0/ReleaseNotes.htmlx_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://java.sun.com/javase/6/webnotes/6u17.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/37386Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
http://security.gentoo.org/glsa/glsa-200911-02.xmlVendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2010:084VDB EntrySignaturex_refsource_OVAL
Source: [email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10191VDB EntrySignaturex_refsource_OVAL
Source: [email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6968Quick Info
StatusMODIFIED
CWE
CWE-200
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card