CVE-2009-2720: Sun Java SE

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors.

Affected products

• Sun Java SE: up to and including 6

Published 2009-08-10. Last modified 2026-06-16.