CVE-2009-3865

The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752.

🔗 References (38)

• cve@mitrehttp://java.sun.com/javase/6/webnotes/6u17.html
• cve@mitrehttp://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html
• cve@mitrehttp://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html
• cve@mitrehttp://marc.info/?l=bugtraq&m=134254866602253&w=2
• cve@mitrehttp://secunia.com/advisories/37231
• cve@mitrehttp://secunia.com/advisories/37239
• cve@mitrehttp://secunia.com/advisories/37386
• cve@mitrehttp://secunia.com/advisories/37581
• cve@mitrehttp://secunia.com/advisories/37841
• cve@mitrehttp://security.gentoo.org/glsa/glsa-200911-02.xml
• cve@mitrehttp://sunsolve.sun.com/search/document.do?assetkey=1-66-269869-1
• cve@mitrehttp://support.apple.com/kb/HT3969
• cve@mitrehttp://support.apple.com/kb/HT3970
• cve@mitrehttp://www.redhat.com/support/errata/RHSA-2009-1694.html