OpenJDK DNS cache poisoning by untrusted applets (6981922)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors...

CVE-2011-0863

CVE-2011-0863 affects Oracle Java SE 6 (JRE) Deployment in Update 25 and earlier; a vulnerability in Deployment could allow remote, untrusted Java Web Start apps/Applets to compromise confidentiality, integrity and availability via unknown vectors. The issue is tracked across multiple advisories;...

CVE-2011-0815

CVE-2011-0815 is described here as an unspecified vulnerability in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier that could allow remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availab...

CVE-2011-0867

CVE-2011-0867 is documented in connected advisories as a vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 6 Update 25 and earlier, Java 5.0 Update 29 and earlier, and 1.4.2_31 and earlier. The MiracleLinux AXSA:2011-485 advisory lists CVE-2011-0867 among fixed issue...

CVE-2011-0788

CVE-2011-0788 is an Oracle Java SE 6 vulnerability affecting the Java Runtime Environment on Windows, enabling remote execution of confidential/integrity/availability-impacting actions by untrusted Java Web Start applications and applets through Deployment-related vectors. The related connected d...

CVE-2011-0871

CVE-2011-0871 is an unspecified Swing-related vulnerability in the Java Runtime Environment that affected Oracle JREs (6u25 and earlier, 5.0u29 and earlier, 1.4.2u31 and earlier) enabling remote untrusted applets/webstart to affect confidentiality, integrity, and availability. Connected advisorie...

CVE-2011-0872

CVE-2011-0872 affects Oracle Java SE/JRE 6 Update 25 and earlier. The vulnerability lies in the NIO component and can impact availability via unknown vectors, exploitable remotely. The connected records reference this CVE among Java-related issues and indicate later updates/patches address multip...

CVE-2011-0862

CVE-2011-0862 affects the Java Runtime Environment (JRE) in Oracle Java SE 6 up to update 25, Java SE 5 up to update 29, and Java 1.4.2 up to 1.4.2_31, via unknown 2D-related vectors that could compromise confidentiality, integrity, and availability. The MiracleLinux AXSA:2011-485 advisory notes ...

CVE-2011-0868

CVE-2011-0868 affects Oracle Java SE 6, specifically the JRE component up to Update 25 and earlier. The vulnerability is described as an unspecified issue in the 2D subsystem that could impact confidentiality via unknown attack vectors, with no explicit exploit details provided in the sources. Th...

CVE-2011-0865

CVE-2011-0865 is described in the provided documents as an unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier, allowing remote untrusted Java Web Start applications and untrusted ...

CVE-2011-0817

CVE-2011-0817 is an Oracle Java SE 6 Deployment-related vulnerability (affecting Java SE 6 Update 25 and earlier on Windows) that could allow remote untrusted Java Web Start applications and untrusted applets to affect confidentiality, integrity, and availability via unknown vectors. Several thir...

CVE-2011-0786

CVE-2011-0786 affects Oracle Java SE 6 on Windows (JRE/Deployment components) and is part of a set of vulnerabilities addressed by Java 6 Update 26. The issue is described as an unspecified vulnerability in the JRE deployment area that could allow remote execution or disclosure via untrusted Web ...

VUPEN Security Research - Oracle Java ICC Profile "scrn" Tag Integer Overflow Code Execution Vulnerability

VUPEN Security Research - Oracle Java ICC Profile "scrn" Tag Integer Overflow Code Execution Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems now Oracle. It is the...

JVN#18680611: Java Web Start may insecurely load dynamic libraries

Java Web Start is tool to distribute Java applications over the web and is contained in Java applications such as JRE Java Runtime Environment Java Web Start contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact An attacker may execute arbitrar...

VUPEN Security Research - Oracle Java ICC Profile "pseq" Tag Integer Overflow Code Execution Vulnerability

VUPEN Security Research - Oracle Java ICC Profile "pseq" Tag Integer Overflow Code Execution Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems now Oracle. It is the...

VUPEN Security Research - Oracle Java ICC Profile "bfd" Tag Integer Overflow Code Execution Vulnerability

VUPEN Security Research - Oracle Java ICC Profile "bfd" Tag Integer Overflow Code Execution Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems now Oracle. It is the...

VUPEN Security Research - Oracle Java ICC Profile "mluc" Tag Integer Overflow Code Execution Vulnerability

VUPEN Security Research - Oracle Java ICC Profile "mluc" Tag Integer Overflow Code Execution Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems now Oracle. It is the...

RHEL 4 / 5 / 6 : java-1.6.0-sun (RHSA-2011:0860)

Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring...

HP-UX Update for Java HPSBUX02685

Check for the Version of Java OpenVAS Vulnerability Test HP-UX Update for Java HPSBUX02685 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Crimepack 3.1.3 Exploit kit Leaked, available for Download !

Crimepack 3.1.3 Exploit kit Leaked, available for Download ! Part 1: Java Exploit As stated above, I focus on a malware that exploits a recent JRE vulnerability: CVE-2010-0840 to execute malicious files on a victim system. This malware comes inside a jar file, which contains the following two...