Red Hat Security Advisory

RHSA-2009:0394

java-1.5.0-sun security update

Released 2009-03-26 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras java-1.5.0-sun-1.5.0.18-1jpp.1.el4, java-1.5.0-sun-1.5.0.18-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.18-1jpp.1.el4 +8
Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-sun-1.5.0.18-1jpp.1.el4, java-1.5.0-sun-1.5.0.18-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.18-1jpp.1.el4 +8
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-sun-1.5.0.18-1jpp.1.el5, java-1.5.0-sun-1.5.0.18-1jpp.1.el5.i586, java-1.5.0-sun-demo-1.5.0.18-1jpp.1.el5 +8
Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-sun-1.5.0.18-1jpp.1.el4, java-1.5.0-sun-1.5.0.18-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.18-1jpp.1.el4 +8
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-sun-1.5.0.18-1jpp.1.el5, java-1.5.0-sun-1.5.0.18-1jpp.1.el5.i586, java-1.5.0-sun-demo-1.5.0.18-1jpp.1.el5 +8
Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-sun-1.5.0.18-1jpp.1.el4, java-1.5.0-sun-1.5.0.18-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.18-1jpp.1.el4 +8

Fixes 11 records

TI-2009-01050 CVE-2009-1096 · GHSA-67c2-9w2r-cg77

Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime…

MEDIUM 54

Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08233 Published 2009-03-25 Fixed CWE-119

TI-2009-01049 CVE-2009-1095 · GHSA-86hj-mfgv-6432

Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime…

MEDIUM 53

Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2009-03-25 Fixed CWE-189

TI-2009-01052 CVE-2009-1098 · GHSA-97w6-6433-7ccq

Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0…

MEDIUM 50

Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access fil…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06787 Published 2009-03-25 Fixed CWE-119

TI-2009-01048 CVE-2009-1094 · GHSA-5w5h-m7x5-fq48

Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and…

MEDIUM 50

Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04389 Published 2009-03-25 Fixed

TI-2006-02362 CVE-2006-2426 · GHSA-mwm5-6468-q7xv

Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK…

MEDIUM 43

Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function t…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.12982 Published 2006-05-17 Fixed

TI-2009-01053 CVE-2009-1099 · GHSA-6g46-c364-qcjc

Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment…

MEDIUM 41

Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via c…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0566 Published 2009-03-25 Fixed CWE-189

TI-2009-01057 CVE-2009-1103 · GHSA-4hqw-69p6-5rh9

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java…

LOW 36

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04519 Published 2009-03-25 Fixed

TI-2009-01058 CVE-2009-1104 · GHSA-pqph-446w-r3p4

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0…

LOW 30

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localh…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02165 Published 2009-03-25 Fixed CWE-16

TI-2009-01054 CVE-2009-1100 · GHSA-mh7w-frv3-83jh

Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime…

LOW 29

Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk c…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03584 Published 2009-03-25 Fixed

TI-2009-01047 CVE-2009-1093 · GHSA-4qmv-gqgr-jxhq

LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment…

LOW 29

LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not clos…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03381 Published 2009-03-25 Fixed CWE-16

TI-2009-01061 CVE-2009-1107 · GHSA-xx8v-jwch-cjrx

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6…

LOW 25

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unkno…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02799 Published 2009-03-25 Fixed