10

CVE-2009-1896

The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least one of the listed jar files is trusted, which allows context-dependent attackers to execute arbitrary code without the untrusted-code restrictions via a crafted application, related to NetX.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Openjdk Version <= 1.6.0.0
   Fedoraproject ≫ Fedora Version10
   Fedoraproject ≫ Fedora Version11
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.03% 0.858
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/36162
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:209
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html
Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html
https://bugzilla.redhat.com/show_bug.cgi?id=512101