VULNERABILITY INTELLIGENCE

CVE-2009-3886

CVSS score7.5 HIGH
EPSS probability1.70%
CISA KEVNot currently listed
Published2009-11-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a "regression," aka Bug Id 6870531.

Primary references