CVE-2009-1100: Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5....

Security readout for executives and security teams

This old Java vulnerability can let a remote attacker consume disk space through temporary font file behavior, causing denial of service. It affects Java JDK/JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier. The public record does not provide CVSS, CWE, or detailed attack vectors. Exposure is most likely on legacy systems still running affected Java JDK/JRE versions, including vendor-packaged Java on Linux, HP, VMware, or Avaya-supported environments referenced by advisories. Modern systems are unlikely to be exposed unless old runtimes remain installed or bundled with applications. Prioritize remediation where legacy Java is still present on business-critical or externally reachable systems. The likely business impact is service disruption from disk exhaustion, but incomplete public detail prevents a precise severity rating. Mitigation focus: Upgrade affected JDK/JRE versions beyond 5.0 Update 17 or 6 Update 12.; Apply relevant OS or appliance vendor security updates.; Remove obsolete Java runtimes where no business dependency remains..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.