NVD

Id
48941  
Name
CVE-2009-1672  
Description
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-05-18  
Modified Date
2009-05-23  
Seq
2009-1672  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247266 48941 CVE-2009-1672 8665  View
247267 48941 CVE-2009-1672 34931  View
247268 48941 CVE-2009-1672 http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html  View
247269 48941 CVE-2009-1672 sun-jre-activex-code-execution(50629)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45011 JVNDB-2009-006018 Sun Java SE Runtime Environment の deploytk.dll における任意のコードを実行される脆弱性 Sun Java SE Runtime Environment の deploytk.dll の Deployment Toolkit ActiveX コントロールには、任意のコードを実行される、および JRE インストールプロセスを起動される脆弱性が存在します。 CVE-2009-1672 39103 CVE-2009-1672 48941 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006018.html 2009-05-18 2012-12-20 View