CVE-2009-3886

The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1)…

published November 9, 2009

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a "regression," aka Bug Id 6870531.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01701 · 77.0th percentile
Published
2009-11-09T19:00Z
EPSS history
Timeline
  • 09 NOV 19:00Z
    The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1)…
    cvelistv5