Red Hat Security AdvisoryRHSA-2009:0369
java-1.6.0-ibm security update
Released 2009-03-25 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.4-1jpp.1.el4 +10
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4.i386, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4.ppc +17
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.4-1jpp.1.el5 +12
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.4-1jpp.1.el4 +10
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el5.i386, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el5.ppc +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4, java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.4-1jpp.1.el4 +10
Fixes 8 records
Priority MEDIUM 52
Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow re…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10015 · Published 2008-12-05 · Partial fix CWE-189
Priority MEDIUM 52
Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execut…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08914 · Published 2008-12-05 · Partial fix CWE-119
Priority MEDIUM 50
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07462 · Published 2008-12-05 · Fixed CWE-119
Priority MEDIUM 49
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applicatio…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0375 · Published 2008-12-05 · Fixed CWE-264
Priority MEDIUM 47
Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote attackers to make unauthorized network connect…
CVSS 2.0HIGH 9.0· Network · No auth · Interaction — · EPSS 0.05093 · Published 2008-12-05 · Fixed
Priority LOW 39
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which make…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03426 · Published 2008-12-05 · Fixed CWE-264
Priority LOW 28
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows unt…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03013 · Published 2008-12-05 · Fixed CWE-200
Priority LOW 28
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03013 · Published 2008-12-05 · Fixed CWE-200
THREATIST.IORead the docs