java security update

CentOS Errata and Security Advisory CESA-2012:0135 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring Syste...

PT-2012-2616

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier JavaFX versions 2.0.2 and earlier Description The issue allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

PT-2012-2615

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 Update 2 Java SE versions prior to 6 Update 30 Java SE versions prior to 5.0 Update 33 Java SE versions prior to 1.4.2 35 JavaFX versions prior to 2.0.2 Description The issue affects the Java Runtime Environment...

PT-2012-2620

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier Description The issue affects confidentiality, integrity, and availability. It is related to the Install and Java Update mechanism in the Java Runtime Environment component...

PT-2012-2614

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier Description The issue affects the Java Runtime Environment component, allowing remote attackers to impact confidentiality, integrity, and...

CVE-2012-0506

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via...

CVE-2012-0497

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors...

OpenJDK: JavaSound incorrect bounds check (Sound, 7088367)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound...

OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...

OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality an...

PT-2012-1716

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5.0 Update 33 and earlier Java SE version 1.4.2 35 and earlier Description The issue affects confidentiality and availability via unknown vectors...

Sun Java Web Start Plugin Command Line Argument Injection

This module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the...

PT-2012-2618

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5.0 Update 33 and earlier Java SE versions 1.4.2 35 and earlier Description The issue affects the confidentiality and availability of systems due...

Oracle Java SE Remote Java Runtime Environment Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability in Java Runtime Environment. An attacker can exploit this issue to bypass the Java sandbox restriction and execute arbitrary code. This vulnerability affects the following supported versions: 7 Update 2, 6 Update 30, 5.0...

PT-2012-2613

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier Description The issue affects confidentiality, integrity, and availability. It is related to the 2D component in the Java Runtime Environment, but the specific vectors of the iss...

PT-2012-2619

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5.0 Update 33 and earlier Java SE version 1.4.2 35 and earlier Description The issue affects the Java Runtime Environment component, allowing...

PT-2012-2621

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 2 and earlier Java SE versions 6 Update 30 and earlier Java SE versions 5 Update 33 and earlier Java SE version 1.4.2 35 and earlier Description The issue affects the Java Runtime Environment component, allowing remot...

PT-2012-1238

Name of the Vulnerable Software and Affected Versions Java Runtime Environment versions 5.0 Update 33 and earlier Java Runtime Environment versions 6 Update 30 and earlier Java Runtime Environment versions 7 Update 2 and earlier Description The issue is related to an unspecified vulnerability in...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS12-004...