AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1896

HIGH · CVSS 10 EPSS 3.03%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-08-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 10.0. It affects Java.

CVE
CVE-2009-1896
Severity
HIGH
CVSS
10
EPSS
3.03%
Java

Original NVD Description

The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least one of the listed jar files is trusted, which allows context-dependent attackers to execute arbitrary code without the untrusted-code restrictions via a crafted application, related to NetX.