CVE-2010-0887

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0887

CVE-2010-0887 affects Oracle Java SE/Java for Business JDK/JRE 6 Update 18–19, targeting the New Java Plug-in. The vulnerability allows a remote attacker to affect confidentiality, integrity, and availability via unknown vectors. An active mitigation is upgrading to Java 6 update 20 (1.6.0_20) fo...

Oracle Java JDK / JRE 6 < Update 20 Multiple Vulnerabilities

The version of Oracle formerly Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 20. Such versions are potentially missing critical security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

JAVA Web Start - Arbitrary Command-Line Injection

Bye bye my little 0day :, Tavis Ormandy did a great job uncovering a big logic flaw within Java JRE. I discovered that bug and other that affects every browser few weeks ago and I posted the common "0day++" tweet. The method in which Java Web Start support has been added to the JRE is not less th...

Java Deployment Toolkit - Performs Insufficient Validation of Parameters

Java Deployment Toolkit Performs Insufficient Validation of Parameters ------------------------------------------------------------------------- Java Web Start henceforth, jws provides java developers with a way to let users launch and install their applications using a URL to a Java Networking...

Java Deployment Toolkit Performs Insufficient Validation of Parameters

Exploit for windows platform in category remote exploits ====================================================================== Java Deployment Toolkit Performs Insufficient Validation of Parameters ====================================================================== Java Deployment Toolkit...

JAVA Web Start Arbitrary command-line injection

Exploit for multiple platform in category remote exploits =============================================== JAVA Web Start Arbitrary command-line injection =============================================== Bye bye my little 0day :, Tavis Ormandy did a great job uncovering a big logic flaw within Java...

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems. It is the underlying technology that powers...

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems. It is the underlying technology that powers...

Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Runtime. Authentication is not required to exploit this vulnerability. The specific flaw exists within the code responsible for ensuring proper privileged execution of methods. If an...

OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095...

Secunia Research: Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow

====================================================================== Secunia Research 31/03/2010 - Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow - ====================================================================== Table of Contents Affected...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)

The version of Oracle formerly Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.226. Such versions are potentially affected by security issues in the following components : - ImageIO - Java 2D - JRE - Java Web Start, Java Plug-in -...

CA Releases Updates for ARCserve Backup

CA has released updates to address vulnerabilities in the version of Java JRE bundled with ARCserve Backup. These vulnerabilities in Java JRE may allow an attacker to execute arbitrary code, bypass security restrictions, cause a denial-of-service condition, or obtain sensitive information. US-CER...

Sun Java Web Start JNLP java-vm-args Heap Buffer Overflow (CVE-2008-3111)

The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It allows for the network deployment of Java applications. This component enables stand-alone Java applications to be downloaded from a remote network location and invoked on a target machine. There exists a heap buffer...

HP-UX Update for Java HPSBUX02503

Check for the Version of Java OpenVAS Vulnerability Test HP-UX Update for Java HPSBUX02503 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

VMSA-2010-0002:VMware vCenter update release addresses multiple security issues in Java JRE

VMSA-2010-0002.4 VMware vCenter update release addresses multiple security issues in Java JRE VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0002.4 VMware Security Advisory Synopsis: VMware vCenter update release addresses multiple security issues in Java JRE VMware...