PT-2009-6091 · Sun+1 · Java Se+1

Peter Csepely · Published 2009-11-05 · Updated 2017-09-19 · CVE-2009-3866

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java SE versions prior to JDK and JRE 6 Update 17

Description The issue concerns the Java Web Start Installer in Sun Java SE, which does not properly utilize security model permissions when removing installer extensions. This allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application.

Recommendations For versions prior to JDK and JRE 6 Update 17, update to JDK and JRE 6 Update 17 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-3866

RHSA-2009:1560

RHSA-2009:1694

RHSA-2010:0043

Affected Products

Java Platform

Java Se

References · 22

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-269870-1 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-1694.html · Vendor Advisory
• http://secunia.com/advisories/37231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3866 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-09-077 · Patch
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200911-02.xml · Vendor Advisory
• http://java.sun.com/javase/6/webnotes/6u17.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/3131 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html · Vendor Advisory
• https://oracle.com/technetwork/java/javase/6u17-141447.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3866 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6635 · Note