[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQ1kDJqTmSrL31zxr_yzKq4I5ayTRocJhfkGpRnXfDi0":3,"g5a-ex:sun\u002Fopenjdk@*":102,"g5a-family:sun\u002Fopenjdk":104},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":79,"seoMetadata":80,"meta":99},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"sun","openjdk",2,17,0,"2011-01-20",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.6.0.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"6","Openjdk by Sun is a technology product with 2 tracked versions and 17 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},[25,33,37,44,50,56,61,65,69,73],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":32},"CVE-2009-0733","Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.","2009-03-23",9.3,"v2","Critical",0.05534,{"cveId":34,"description":35,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":36},"CVE-2009-0723","Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.",0.05027,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":30,"severity":42,"isKev":17,"epssScore":43},"CVE-2009-0793","cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for \"transformations of monochrome profiles.\"","2009-04-09",4.3,"Medium",0.04834,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":30,"severity":42,"isKev":17,"epssScore":49},"CVE-2009-3728","Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.","2009-11-09",5,0.03751,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":55},"CVE-2009-1896","The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least one of the listed jar files is trusted, which allows context-dependent attackers to execute arbitrary code without the untrusted-code restrictions via a crafted application, related to NetX.","2009-08-10",10,0.03031,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":48,"cvssVersion":30,"severity":42,"isKev":17,"epssScore":60},"CVE-2009-0794","Integer overflow in the PulseAudioTargetDataL class in src\u002Fjava\u002Forg\u002Fclasspath\u002Ficedtea\u002Fpulseaudio\u002FPulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service (applet crash) via a crafted Pulse Audio source data line.","2009-04-13",0.03024,{"cveId":62,"description":63,"publishedDate":47,"cvssScore":48,"cvssVersion":30,"severity":42,"isKev":17,"epssScore":64},"CVE-2009-3884","The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",0.02951,{"cveId":66,"description":67,"publishedDate":53,"cvssScore":54,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":68},"CVE-2009-2476","The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.",0.02877,{"cveId":70,"description":71,"publishedDate":53,"cvssScore":54,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":72},"CVE-2009-2689","JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.",0.02839,{"cveId":74,"description":75,"publishedDate":47,"cvssScore":76,"cvssVersion":30,"severity":77,"isKev":17,"epssScore":78},"CVE-2009-3881","Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",7.5,"High",0.02666,[],{"title":81,"metaDescription":82,"keywords":83,"structuredData":84},"Openjdk by Sun - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openjdk by Sun covering 2 versions with 17 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openjdk vulnerabilities, Openjdk security, Openjdk CVE, Sun Openjdk, Openjdk threat intelligence, Sun security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":85,"@type":86,"name":87,"description":82,"url":88,"manufacturer":89,"applicationCategory":93,"softwareVersion":94,"mainEntity":95},"https:\u002F\u002Fschema.org","SoftwareApplication","Openjdk","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsun\u002Fopenjdk",{"@type":90,"name":91,"url":92},"Organization","Sun","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsun","Security Software","2 versions tracked",{"@type":96,"name":97,"description":98,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openjdk Security Vulnerabilities","Security vulnerabilities affecting Openjdk by Sun",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":100,"apiVersion":101},"2026-10-17T20:13:26.313Z","3.0",{"rows":103,"total":11,"capped":17,"failed":11},[],[]]