Red Hat Security AdvisoryRHSA-2009:0377
java-1.6.0-openjdk security update
Released 2009-04-07 · Red Hat rating Important · View on Red Hat →
Fixes 13 records
Priority MEDIUM 54
Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code v…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08233 · Published 2009-03-25 · Fixed CWE-119
Priority MEDIUM 53
Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07099 · Published 2009-03-25 · Fixed CWE-189
Priority MEDIUM 50
Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access fil…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06787 · Published 2009-03-25 · Fixed CWE-119
Priority MEDIUM 50
Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that trig…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07089 · Published 2009-03-25 · Fixed CWE-119
Priority MEDIUM 50
Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04389 · Published 2009-03-25 · Fixed
Priority MEDIUM 48
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbit…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05534 · Published 2009-03-23 · Fixed CWE-787
Priority MEDIUM 48
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that tri…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05027 · Published 2009-03-23 · Fixed CWE-190
Priority MEDIUM 43
Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function t…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.12982 · Published 2006-05-17 · Fixed
Priority LOW 36
Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.04574 · Published 2009-03-25 · Fixed CWE-94
Priority LOW 29
Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (pr…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03584 · Published 2009-03-25 · Fixed
Priority LOW 29
LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not clos…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03381 · Published 2009-03-25 · Fixed CWE-16
Priority LOW 28
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that tr…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04834 · Published 2009-04-09 · Partial fix CWE-20
Priority LOW 25
Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) v…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02502 · Published 2009-03-23 · Fixed CWE-401