Red Hat Security AdvisoryRHSA-2007:0963
java-1.5.0-sun security update
Released 2007-10-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.5.0-sun-1.5.0.13-1jpp.1.el4, java-1.5.0-sun-1.5.0.13-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el4 +8
- Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-sun-1.5.0.13-1jpp.1.el4, java-1.5.0-sun-1.5.0.13-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el4 +8
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-sun-1.5.0.13-1jpp.1.el5, java-1.5.0-sun-1.5.0.13-1jpp.1.el5.i586, java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el5 +8
- Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-sun-1.5.0.13-1jpp.1.el4, java-1.5.0-sun-1.5.0.13-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el4 +8
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-sun-1.5.0.13-1jpp.1.el5, java-1.5.0-sun-1.5.0.13-1jpp.1.el5.i586, java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el5 +8
- Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-sun-1.5.0.13-1jpp.1.el4, java-1.5.0-sun-1.5.0.13-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el4 +8
Fixes 7 records
Priority MEDIUM 51
The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04894 · Published 2007-10-29 · Fixed
Priority LOW 28
Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier all…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02956 · Published 2007-10-06 · Fixed
Priority LOW 25
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, all…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.03418 · Published 2007-10-05 · Fixed
Priority LOW 24
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for un…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.02544 · Published 2007-10-06 · Fixed CWE-264
Priority LOW 18
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allo…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02678 · Published 2007-10-08 · Fixed
Priority LOW 18
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used,…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02678 · Published 2007-10-08 · Fixed
Priority LOW 18
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02663 · Published 2007-10-06 · Fixed CWE-264
THREATIST.IORead the docs