Red Hat Security Advisory

RHSA-2010:0574

java-1.4.2-ibm security update

Released 2010-07-29 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 3 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3.i386, java-1.4.2-ibm-demo-1.4.2.13.5-1jpp.1.el3 +7
Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.5-1jpp.1.el4 +9
Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3.ia64 +17
Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4.ia64 +20
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.5-1jpp.1.el5 +9
Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3.ia64 +11
Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4.ia64 +13
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el5.i386, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el5.ia64 +20
Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3.i386, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el3.ia64 +11
Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.5-1jpp.1.el4.ia64 +13

Fixes 17 records

TI-2010-00801 CVE-2010-0840 · GHSA-8rrv-3xx7-wmfc

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96319 Published 2010-04-01 Fixed

TI-2010-00803 CVE-2010-0842 · GHSA-5mqp-g99f-6r5f

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

HIGH 72

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.77721 Published 2010-04-01 Fixed

TI-2010-00810 CVE-2010-0849 · GHSA-xjj5-69gv-xxqg

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for…

MEDIUM 42

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06762 Published 2010-04-01 Fixed

TI-2010-00807 CVE-2010-0846 · GHSA-hmf5-2rc2-q7f8

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for…

MEDIUM 42

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06581 Published 2010-04-01 Fixed

TI-2010-00804 CVE-2010-0843 · GHSA-xqj5-jf43-pwhr

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 42

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06194 Published 2010-04-01 Fixed

TI-2010-00802 CVE-2010-0841 · GHSA-wqm8-5hfp-cx2w

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for…

MEDIUM 42

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unkno…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06194 Published 2010-04-01 Fixed

TI-2010-00808 CVE-2010-0847 · GHSA-q6vj-cjm6-x954

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for…

MEDIUM 41

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05535 Published 2010-04-01 Fixed

TI-2010-00809 CVE-2010-0848 · GHSA-pg6j-wgxm-fp8g

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for…

LOW 39

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03636 Published 2010-04-01 Fixed

TI-2010-00805 CVE-2010-0844 · GHSA-gxc6-jrc3-x89v

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

LOW 39

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03788 Published 2010-04-01 Fixed

TI-2010-00800 CVE-2010-0839 · GHSA-xjcv-f3gw-h9m2

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

LOW 39

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03538 Published 2010-04-01 Fixed

TI-2010-00086 CVE-2010-0087 · GHSA-rxqj-7gj2-prpm

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE…

LOW 39

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03337 Published 2010-04-01 Fixed

TI-2010-00094 CVE-2010-0095 · GHSA-2fm9-mpfh-qw5j

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

LOW 36

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03036 Published 2010-04-01 Fixed

TI-2010-00087 CVE-2010-0088 · GHSA-53c3-c3pf-mjfg

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

LOW 36

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity,…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03036 Published 2010-04-01 Fixed

TI-2010-00088 CVE-2010-0089 · GHSA-p3hr-944c-g4qr

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE…

LOW 29

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03361 Published 2010-04-01 Fixed

TI-2010-00084 CVE-2010-0085 · GHSA-p23w-f9f7-7w5r

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

LOW 29

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03084 Published 2010-04-01 Fixed

TI-2010-00083 CVE-2010-0084 · GHSA-h267-7942-cfp5

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

LOW 29

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03162 Published 2010-04-01 Fixed

TI-2010-00090 CVE-2010-0091 · GHSA-wxc7-vw25-7jmv

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

LOW 25

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02783 Published 2010-04-01 Fixed