Lucene search

RedhatCVE-2009-3886

HistoryNov 09, 2009 - 7:30 p.m.

CVE-2009-3886

2009-11-0919:30:00

redhat

web.nvd.nist.gov

cve-2009-3886

java

web start

sun java se

vulnerability

update 17

jar file

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.003

Percentile

71.4%

JSON

The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a “regression,” aka Bug Id 6870531.

Affected configurations

Nvd

Node

sunjreRange≤1.6.0update_16

sunjreMatch1.6.0update_1

sunjreMatch1.6.0update_10

sunjreMatch1.6.0update_11

sunjreMatch1.6.0update_12

sunjreMatch1.6.0update_13

sunjreMatch1.6.0update_14

sunjreMatch1.6.0update_15

sunjreMatch1.6.0update_2

sunjreMatch1.6.0update_3

sunjreMatch1.6.0update_4

sunjreMatch1.6.0update_5

sunjreMatch1.6.0update_6

sunjreMatch1.6.0update_7

sunjreMatch1.6.0update_8

sunjreMatch1.6.0update_9

VendorProductVersionCPE
sunjre*cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*
sunjre1.6.0cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	jre	*	cpe:2.3:a:sun:jre::update_16::::::*
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_1::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_10::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_11::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_12::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_13::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_14::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_15::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_2::::::
sun	jre	1.6.0	cpe:2.3:a:sun:jre:1.6.0:update_3::::::