Vulnerability in Sun Openjdk

CVE-2009-1896

The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least one of the listed jar files is trusted, which allows contex…

EPSS: 0.030 (86.0th percentile) — read the EPSS interpretation.

Affected products

Sun Openjdk
Fedoraproject Fedora — versions 10, 11
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Vendor Advisory)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)