CVE-2009-3881

CVE-2009-3881 is a privilege escalation vulnerability affecting Sun Java SE 5.0 before Update 22, 6 before Update 17, and OpenJDK. It stems from an "information leak" related to ClassLoader resurrection, allowing remote attackers to gain elevated privileges. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.