logo
DATABASE RESOURCES PRICING ABOUT US

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 5465)

Description

This update of IBM Java to 1.4.2 SR11 fixes various security problems : - Stack-based buffer overflow in Java Web Start (javaws.exe) allows remote attackers to execute arbitrary code via a crafted JNLP file. (CVE-2008-1196) - Unspecified vulnerability in the Java Runtime Environment (JRE) allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms. (CVE-2008-1187) - Visual truncation vulnerability in the Java Runtime Environment allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen. (CVE-2007-5240)


Related