CVE-2007-2788

CVE-2007-2788 describes an integer overflow in Sun JDK/JRE image parsers that can be triggered by crafted JPEG or BMP files, leading to remote arbitrary code execution or JVM crash via a buffer overflow. Affected are Sun JDK/JRE versions prior to 1.5.0_11-b03 (JDK) and prior to 1.6.x before 1.6.0...

Sun JDK JPG/BMP解析存在多个漏洞

Sun JDK存在多个安全问题，攻击者可以利用漏洞使应用程序崩溃，也可能执行任意指令。 Sun JDK解析特殊构建的JPG/BMP文件存在问题，目前没有详细漏洞细节提供。 Sun JDK 1.5 07-b03 JDK 1.5.011-b03和1.6.001-b06不受此漏洞影响： http://java.sun.com/ 攻击者可以参考如下测试文件： http://www.securityfocus.com/data/vulnerabilities/exploits/24004.bmp...

Sun Java JDK 1.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary code, which may facilitate a compromise of t...

Sun Java JDK 1.x - Multiple Vulnerabilities

Sun Java JDK 1.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary...

CVE-2007-2435

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to...

CVE-2007-2435

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to...

CVE-2007-2435

Affected software: Sun Java Web Start in JDK/JRE 5.0 Update 10 and earlier; and Java Web Start in SDK/JRE 1.4.2_13 and earlier. Root cause: incorrect use of system classes related to JNLP processing. Impact: remote attacker could cause the application to perform unauthorized actions by granting p...

CVE-2007-2435

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to...

Sun Java Web Start Unauthorized Access (102881)

According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly may allow an untrusted application to elevate its privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

GLSA-200702-07 : Sun JDK/JRE: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200702-07 Sun JDK/JRE: Execution of arbitrary code A anonymous researcher discovered that an error in the handling of a GIF image with a zero width field block leads to a memory corruption flaw. Impact : An attacker could entice a...

AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. The x86 emulation Sun's J2SE Development Kit for AMD64 contains a vulnerable version of Sun's JDK. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Su...

GLSA-200701-15 : Sun JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-15 Sun JDK/JRE: Multiple vulnerabilities Chris Evans has discovered multiple buffer overflows in Sun JDK and Sun JRE possibly related to various AWT or font layout functions. Tom Hawtin has discovered an unspecified...

ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability

ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-005.html January 16, 2007 -- CVE ID: CVE-2007-0243 -- Affected Vendor: Sun Microsystems -- Affected Products: JDK and JRE 5.0 Update 9 and earlier all platforms SD...

Buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

CVE-2007-0243

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

CVE-2007-0243

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

CVE-2007-0243

CVE-2007-0243 is a memory-corruption vulnerability in Sun JDK/JRE GIF image handling. The issue arises when parsing a GIF block with a 0 width field, allowing an attacker to potentially execute arbitrary code or gain privileges within a browser-hosted Java applet context. Affected are Sun Java De...

CVE-2006-6745

CVE-2006-6745 describes serialization-related flaws in Sun JDK/JRE 5.0 Update 7 and earlier, and Java SDK/JRE 1.4.2_12 and earlier 1.4.x, that could allow an untrusted Java applet or application to gain privileges. The connected advisories confirm these issues affect multiple IBM Java runtimes as...

CVE-2006-6736

CVE-2006-6736 affects Sun JDK/JRE 5.0 Update 6 and earlier, J2SDK/JRE 1.4.2_12 and earlier 1.4.x, and JDK/JRE 1.3.1_18 and earlier. The vulnerability allows an untrusted applet to access data in other applets (two issues). The connected advisories reference fixes in IBM/Sun Java updates and list ...

CVE-2006-6737

CVE-2006-6737 affects Sun JDK/JRE 5.0 Update 5 and earlier, J2SDK/JRE 1.4.2_10 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issue allows an untrusted applet to access data in other applets (cross-applet data access). Red Hat and SUSE/OpenVAS entries confirm IBM/Java updates mitigate...