← Vulnerability feed

Vulnerability record · CVE-2009-0794 · published 13 April 2009

CVE-2009-0794: Sun openjdk vulnerability

Sun · Openjdk

Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service (applet crash) via a crafted Pulse Audio source data line.

5.0 CVSS 2.0 Medium EPSS 3.0% · top 13.0% CWE-189 · CWE-189
5.0CVSS 2.0 base score
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service (applet crash) via a crafted Pulse Audio source data line.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2009-February/004729.html
http://secunia.com/advisories/34623 Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:137
http://www.mandriva.com/security/advisories?name=MDVSA-2009:162
http://www.vupen.com/english/advisories/2009/0965
https://bugzilla.redhat.com/show_bug.cgi?id=492367
https://exchange.xforce.ibmcloud.com/vulnerabilities/50383
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2009-February/004729.html
http://secunia.com/advisories/34623 Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:137
http://www.mandriva.com/security/advisories?name=MDVSA-2009:162
http://www.vupen.com/english/advisories/2009/0965
https://bugzilla.redhat.com/show_bug.cgi?id=492367
https://exchange.xforce.ibmcloud.com/vulnerabilities/50383
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html

Track CVE-2009-0794 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-2476Sun java se permissions and access controls vulnerabilityThe Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which …EPSS 2.9%10.0CVE-2009-1896Sun openjdk permissions and access controls vulnerabilityThe Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an en…EPSS 3.0%10.0CVE-2009-2689Sun java se permissions and access controls vulnerabilityJDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecifie…EPSS 2.8%9.3CVE-2009-0733Gimp out-of-bounds write vulnerabilityMultiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta…EPSS 5.5%9.3CVE-2009-0723Gimp integer overflow vulnerabilityMultiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependen…EPSS 5.0%7.8CVE-2009-2475Sun java se information exposure vulnerabilitySun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vec…EPSS 2.3%7.5CVE-2009-3883Sun openjdk information exposure vulnerabilityMultiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Upda…EPSS 2.0%7.5CVE-2009-3881Sun jre information exposure vulnerabilitySun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which …EPSS 2.7%

Source: NIST National Vulnerability Database (record CVE-2009-0794), CISA KEV, FIRST EPSS (scores of 2026-10-01). This page is refreshed as NVD updates the record.