Candidate: CVE-2009-3865 PublicDate: 2009-11-05 16:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3865 http://java.sun.com/javase/6/webnotes/6u17.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-269869-1 Description: The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_sun-java6: upstream_sun-java6: released (6.17) dapper_sun-java6: DNE hardy_sun-java6: released (6.20dlj-0ubuntu1.8.04) intrepid_sun-java6: needs-triage (reached end-of-life) jaunty_sun-java6: released (6.20dlj-0ubuntu1.9.04) karmic_sun-java6: released (6.20dlj-0ubuntu1.9.10) lucid_sun-java6: released (6.20dlj-1ubuntu3) devel_sun-java6: DNE