CVE-2009-1671

high · 9.3

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, or (5) launch method.

9.3

CVSS

10.3%

EPSS (exploit prob.)

95th

EPSS percentile

2009-05-18

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
sun	jre	6

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/34931
http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html
https://www.exploit-db.com/exploits/8665
http://www.securityfocus.com/bid/34931
http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html
https://www.exploit-db.com/exploits/8665

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-1671