openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-6125)

The Sun JDK 5 was updated to Update18 to fix various bugs and security issues. CVE-2009-1093: LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier do...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-6128)

The Sun JDK 6 was updated to Update13 to fix various bugs and security issues. CVE-2009-1093: LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier do...

OpenJDK: DoS (disk consumption) via handling of temporary font files

Multiple unspecified vulnerabilities in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service disk consumption via vectors related to temporary font files and 1 "limits on Font...

OpenJDK: Type1 font processing buffer overflow vulnerability

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

Design/Logic Flaw

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

CVE-2009-1107

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

CVE-2009-1103

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.219 and earlier; and 1.3.124 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors...

CVE-2009-1107

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

Buffer overflow

Buffer overflow in unpack200 in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers...

Design/Logic Flaw

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490...

CVE-2009-1106

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

CVE-2009-1095

Integer overflow in unpack200 in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers...

CVE-2009-1102

Technical details about CVE-2009-1102 are not provided in the connected documents. Please monitor for updates from vendors and security advisories.

CVE-2009-1104

The CVE-2009-1104 issue affects the Java Plug-in in JDK/JRE, specifically versions 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier. The root cause is that the Java Plug-in does not prevent Javascript loaded from localhost from connecting to other ports on the system v...

CVE-2009-1094

CVE-2009-1094 affects multiple Java SE components (JDK/JRE) earlier than specified Update/Release levels across 5.0 Update 17 and earlier; 6 Update 12 and earlier; JDK/JRE 1.3.1_24 and earlier; 1.4.2_19 and earlier. The vulnerability is described as an unspecified remote code execution via LDAP, ...

CVE-2009-1105

CVE-2009-1105 affects the Java Plug-in in JDK/JRE 6 Update 12, 11, and 10. The issue allows a user‑assisted remote attacker to cause a trusted applet to execute in an older JRE version, enabling exploitation of vulnerabilities present in that older runtime. The description from SUSE corroborates ...

CVE-2009-1106

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

CVE-2009-1100

CVE-2009-1100 affects Oracle Java SE/JDK/JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier. Vulnerable component: temporary font file handling and (1) limits on Font creation (CR 6522586) and (2) another unspecified vector (CR 6632886). Impact: remote denial of service via disk consumpti...

CVE-2009-1096

Technical details for CVE-2009-1096 are not publicly provided in the connected documents. No concrete affected products, versions, or fixes are specified beyond the initial description. Monitor for updates.

CVE-2009-1107

CVE-2009-1107 involves the Java Plug-in in JDK/JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier. The vulnerability, tied to a Swing JLabel HTML parsing issue (CR 6782871), lets remote attackers trick a user into trusting a signed applet by misrepresenting the security warning dialog. Th...