PT-2009-6091 · Sun+1 · Java Se+1

Peter Csepely · Publicado 2009-11-05 · Atualizado 2017-09-19 · CVE-2009-3866

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java SE versions prior to JDK and JRE 6 Update 17

Description The issue concerns the Java Web Start Installer in Sun Java SE, which does not properly utilize security model permissions when removing installer extensions. This allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application.

Recommendations For versions prior to JDK and JRE 6 Update 17, update to JDK and JRE 6 Update 17 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-3866

RHSA-2009:1560

RHSA-2009:1694

RHSA-2010:0043

Produtos afetados

Java Platform

Java Se

Referências · 22

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-269870-1 · Aviso do Fabricante
• https://oracle.com/technetwork/java/javase/6u17-141447.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3866 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6635 · Nota
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html · Aviso do Fabricante
• http://support.apple.com/kb/HT3969 · Nota
• http://secunia.com/advisories/37386 · Nota
• http://redhat.com/support/errata/RHSA-2009-1694.html · Aviso do Fabricante
• http://secunia.com/advisories/37231 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3866 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-09-077 · Correção
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html · Aviso do Fabricante
• http://support.apple.com/kb/HT3970 · Nota
• http://secunia.com/advisories/37239 · Nota