Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-3869.
PoCs published by Metasploit, jduck, including Metasploit module exploits/multi/browser/java_setdifficm_bof.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the Sun Java JRE AWT setDiffICM function (CVE-2009-3869) by delivering a malicious applet via HTTP. It supports multiple targets and platforms, including Windows, Mac OS X (PPC/x86), and requires no authentication.
Description
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
Exploits (2)
This Metasploit module exploits a buffer overflow in the Sun Java JRE AWT setDiffICM function (CVE-2009-3869) by delivering a malicious applet via HTTP. It supports multiple targets and platforms, including Windows, Mac OS X (PPC/x86), and requires no authentication.
This Metasploit module exploits a buffer overflow vulnerability in the Sun Java JRE AWT setDiffICM function. It delivers a serialized payload via an applet to achieve remote code execution on vulnerable Java versions.