Red Hat Security AdvisoryRHSA-2009:1643
java-1.4.2-ibm security update
Released 2009-12-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3.i386, java-1.4.2-ibm-demo-1.4.2.13.3-1jpp.1.el3 +7
- Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.3-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3.ia64 +17
- Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4.ia64 +20
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.3-1jpp.1.el5 +9
- Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3.ia64 +11
- Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4.ia64 +13
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el5.i386, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el5.ia64 +20
- Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el3.ia64 +11
- Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.3-1jpp.1.el4.ia64 +13
Fixes 10 records
Priority HIGH 78
Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.73193 · Published 2009-11-05 · Fixed CWE-119
Priority HIGH 76
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JR…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.65353 · Published 2009-11-05 · Fixed CWE-119
Priority MEDIUM 52
Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote att…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09498 · Published 2009-11-05 · Fixed CWE-189
Priority MEDIUM 50
Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06817 · Published 2009-11-05 · Fixed CWE-119
Priority MEDIUM 47
The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04195 · Published 2009-11-05 · Fixed CWE-119
Priority MEDIUM 47
Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remot…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04246 · Published 2009-11-05 · Fixed
Priority MEDIUM 47
Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attack…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04246 · Published 2009-11-05 · Fixed CWE-119
Priority LOW 31
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a de…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04905 · Published 2009-11-05 · Fixed CWE-399
Priority LOW 29
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a de…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03475 · Published 2009-11-05 · Fixed CWE-399
Priority LOW 29
The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03168 · Published 2009-11-05 · Fixed CWE-310
THREATIST.IORead the docs