Red Hat Security AdvisoryRHSA-2007:0818
java-1.5.0-sun security update
Released 2007-08-06 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.5.0-sun-1.5.0.12-1jpp.2.el4, java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4 +8
- Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-sun-1.5.0.12-1jpp.2.el4, java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4 +8
- Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-sun-1.5.0.12-1jpp.2.el4, java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4 +8
- Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-sun-1.5.0.12-1jpp.2.el4, java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586, java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4 +8
Fixes 4 records
Priority MEDIUM 44
Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP fi…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.12273 · Published 2007-07-10 · Fixed CWE-119
Priority MEDIUM 41
The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attac…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03822 · Published 2007-07-11 · Fixed
Priority LOW 35
Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to vio…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0286 · Published 2007-07-21 · Fixed
Priority LOW 26
The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03051 · Published 2007-06-30 · Fixed CWE-79
THREATIST.IORead the docs