CVE-2009-3865
sun: no CVSS score yet. EPSS 9.4% chance of exploitation in the next 30 days.
The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752.
- EPSS
- 9.4% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sun:jdk
- sun:jre
References
- http://java.sun.com/javase/6/webnotes/6u17.html
- http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html
- http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html
- http://marc.info/?l=bugtraq&m=134254866602253&w=2