critical9.3Public exploit code
CVE-2009-1672
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities2009-05-13 · dos · windows · Verified
Impact
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Jre | Version 6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/34931
- http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50629
- https://www.exploit-db.com/exploits/8665
- http://www.securityfocus.com/bid/34931
- http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50629
- https://www.exploit-db.com/exploits/8665