CVE-2009-3403 — HIGH (10.0)

Vulnerability Description

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this issue subsumes CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, and CVE-2009-2676.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Oracle	Bea Product Suite	r27.6.4

References

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
http://www.us-cert.gov/cas/techalerts/TA09-294A.htmlUS Government Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
http://www.us-cert.gov/cas/techalerts/TA09-294A.htmlUS Government Resource

FAQ

What is CVE-2009-3403?

CVE-2009-3403 is a vulnerability with a CVSS score of 10.0 (HIGH). Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unknow...

How severe is CVE-2009-3403?

CVE-2009-3403 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-3403?

Check the references section above for vendor advisories and patch information. Affected products include: Oracle Bea Product Suite.