Red Hat Security AdvisoryRHSA-2009:0466
java-1.5.0-ibm security update
Released 2009-05-07 · Red Hat rating Low · View on Red Hat →
Fixes 14 records
Priority CRITICAL 85
The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during des…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.86081 · Published 2008-12-05 · Fixed
Priority MEDIUM 53
Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow rem…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10784 · Published 2008-12-05 · Fixed CWE-119
Priority MEDIUM 52
Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow re…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10015 · Published 2008-12-05 · Partial fix CWE-189
Priority MEDIUM 52
Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execut…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08914 · Published 2008-12-05 · Partial fix CWE-119
Priority MEDIUM 48
Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04798 · Published 2008-12-05 · Fixed CWE-119
Priority MEDIUM 48
Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitor…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05066 · Published 2008-07-09 · Fixed CWE-264
Priority MEDIUM 46
Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allow…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0306 · Published 2008-12-05 · Fixed CWE-189
Priority MEDIUM 40
Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allo…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04122 · Published 2008-12-05 · Fixed
Priority LOW 39
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which make…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03426 · Published 2008-12-05 · Fixed CWE-264
Priority LOW 38
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) v…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.03993 · Published 2008-12-05 · Fixed
Priority LOW 38
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, al…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.04306 · Published 2008-12-05 · Fixed
Priority LOW 36
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications t…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.0281 · Published 2008-12-05 · Fixed CWE-200
Priority LOW 35
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predi…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03478 · Published 2008-12-05 · Fixed
Priority LOW 28
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and apple…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03013 · Published 2008-12-05 · Fixed CWE-200