CVE-2009-1671

CVE-2009-1671 describes multiple buffer overflow vulnerabilities in the Deployment Toolkit ActiveX control (deploytk.dll) within Sun Java SE Runtime Environment (JRE) 6 Update 13. This critical vulnerability allows remote attackers to execute arbitrary code by providing excessively long string arguments to specific methods, including setInstallerType and launch. With a CVSS score of 9.3, it presents a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.