GLSA-200709-15 : BEA JRockit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200709-15 BEA JRockit: Multiple vulnerabilities An integer overflow vulnerability exists in the embedded ICC profile image parser CVE-2007-2788, an unspecified vulnerability exists in the font parsing implementation CVE-2007-4381,...

BEA JRockit: Multiple vulnerabilities

Background BEA JRockit provides tools, utilities, and a complete runtime environment for developing and running applications using the Java programming language. Description An integer overflow vulnerability exists in the embedded ICC profile image parser CVE-2007-2788, an unspecified vulnerabili...

Sun Java运行时环境字体解析Applet权限提升漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE字体解析代码的实现上存在漏洞，可能导致非授权的Applet以提升后的权限执行操作。 JRE字体解析代码中的漏洞可能允许不可信任的applet提升权限，例如，Applet可能给予其本身读写本地文件的权限，或者运行了不可信任Applet用户可以执行所能访问到的本地应用程序。 Sun JDK = 5.0 Update 9 Sun JRE = 5.0 Update 9 Sun JRE = 1.4.214 Sun SDK = 1.4.214...

Design/Logic Flaw

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

CVE-2007-4381 is a font-parsing vulnerability in Sun JDK/JRE up to specified versions (5.0 Update 9 and earlier; 1.4.2_14 and earlier) that could let an untrusted applet gain the same privileges as the user running the applet, enabling unauthorized actions via an applet. Public advisories from Re...

Sun Java Runtime Environment 1.4.2 - Font Parsing Privilege Escalation

Sun Java Runtime Environment 1.4.2 - Font Parsing Privilege Escalation source: https://www.securityfocus.com/bid/25340/info The Sun Java Runtime Environment is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of...

Sun Java Runtime Environment 1.4.2 - Font Parsing Privilege Escalation

source: https://www.securityfocus.com/bid/25340/info The Sun Java Runtime Environment is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the user who invoked the Java applet. Successfully exploiting this issu...

Apple Safari禁用Java偏好失败漏洞

BUGTRAQ ID: 25157 CVECAN ID: CVE-2007-2408 Safari是苹果家族操作系统默认所捆绑的WEB浏览器。 Safari在处理Java Applet的下载和执行时存在漏洞，远程攻击者可能利用此漏洞在用户浏览器中非授权执行Java Applet。 Safari提供了Enable Java偏好选项，如果取消了这个偏好的话就应禁止加载Java Applet。但默认下Safari允许下载Java Applet，因此即使取消了这个偏好仍可能在用户访问恶意网页的时候未经检查偏好便下载并执行Java Applet。 Apple Safari 3.0.2 Beta...

Java screen content spoofing

It's possible to switch applet to full-screen mode...

Critical: Red Hat Security Advisory: java-1.5.0-ibm security update

Updated java-1.5.0-ibm packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.5.0 Java release includes the IBM Java 2...

java: Vulnerability in the font parsing code

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

Vulnerability in the Java Runtime Environment May Allow an Untrusted Applet to Circumvent Network Access Restrictions

Unspecified vulnerability in the Java Runtime Environment JRE Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.214 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to...

Critical: Red Hat Security Advisory: java-1.5.0-sun security update

Updated java-1.5.0-sun packages that correct several security issues are available for Red Hat Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Java Runtime Environment JRE contains the software and tools that user...

CVE-2007-2408

WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets via a crafted web page...

CVE-2007-3747

The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted applet...

CVE-2007-3746: Undefined Security Weakness

The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of heap read and write operations, which allows remote attackers to execute arbitrary code via a crafted applet...

CVE-2007-3747: Undefined Security Weakness

The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted applet...