CVE-2009-1672

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

9.64% chance of exploitation in the next 30 days, 95th percentile

Published

2009-05-18

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8665

References

• CVE Record
• NVD entry

Related

• CVE-2009-1671
• CVE-2009-1674
• CVE-2009-1670
• CVE-2009-1675
• CVE-2009-1669
• CVE-2009-1677