# CVEs published 2009-11-05

14 CVEs were published on November 5, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3864](https://cve.now/CVE-2009-3864.md): The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before (no CVSS)
- [CVE-2009-3865](https://cve.now/CVE-2009-3865.md): The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows (no CVSS)
- [CVE-2009-3866](https://cve.now/CVE-2009-3866.md): The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing (no CVSS)
- [CVE-2009-3867](https://cve.now/CVE-2009-3867.md): Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before (no CVSS)
- [CVE-2009-3868](https://cve.now/CVE-2009-3868.md): Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1\_27, and SDK and JRE 1.4.x be (no CVSS)
- [CVE-2009-3869](https://cve.now/CVE-2009-3869.md): Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE (no CVSS)
- [CVE-2009-3871](https://cve.now/CVE-2009-3871.md): Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java (no CVSS)
- [CVE-2009-3872](https://cve.now/CVE-2009-3872.md): Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK a (no CVSS)
- [CVE-2009-3873](https://cve.now/CVE-2009-3873.md): The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2 (no CVSS)
- [CVE-2009-3874](https://cve.now/CVE-2009-3874.md): Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and (no CVSS)
- [CVE-2009-3875](https://cve.now/CVE-2009-3875.md): The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 befor (no CVSS)
- [CVE-2009-3876](https://cve.now/CVE-2009-3876.md): Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1 (no CVSS)
- [CVE-2009-3877](https://cve.now/CVE-2009-3877.md): Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1 (no CVSS)
- [CVE-2009-3878](https://cve.now/CVE-2009-3878.md): Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd\_sjws (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-11-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.