Sun Network Security Services (NSS) vulnerable to DoS due to an unspecified vulnerability

Overview The NSS libraries used in the Sun One Application Server and the Sun Java System web server contain an unspecified vulnerability that may allow an attacker to create a denial-of-service condition. Description The Sun One Application Server provides a Java 2 Platform for delivering Java...

CVE-2007-0628

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 6.3, and 7 2005Q4 7.0 before 20070129 allow remote attackers to inject arbitrary web script or HTML via the 1 goto or 2 gx-charset parameter. NOTE: some of these details are obtained from third...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 6.3, and 7 2005Q4 7.0 before 20070129 allow remote attackers to inject arbitrary web script or HTML via the 1 goto or 2 gx-charset parameter. NOTE: some of these details are obtained from third...

CVE-2007-0628

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 6.3, and 7 2005Q4 7.0 before 20070129 allow remote attackers to inject arbitrary web script or HTML via the 1 goto or 2 gx-charset parameter. NOTE: some of these details are obtained from third...

CVE-2007-0628

CVE-2007-0628 concerns multiple XSS vulnerabilities in Sun Java System Access Manager versions 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) prior to 20070129. The flaws allow remote attackers to inject arbitrary web script or HTML through the goto or gx-charset parameters. The NVD entry lists a C...

CVE-2007-0628: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 6.3, and 7 2005Q4 7.0 before 20070129 allow remote attackers to inject arbitrary web script or HTML via the 1 goto or 2 gx-charset parameter. NOTE: some of these details are obtained from third...

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

security flaw

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

Sun Java memory corruption

Memory corruption on GIF files parsing with 0 width block. Can be used for hidden malware installation...

Sun JDK/JRE: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Sun JRE possibly related to various AWT or font layout functions. Tom Hawtin has discovered an...

Sun Java JRE GIF Image Handling Buffer Overflow (102760)

According to its version number, the Sun JRE running on the remote host has a buffer overflow issue that can be triggered when parsing a GIF image with the image width in an image block set to 0. If an attacker can trick a user on the affected system into processing a specially crafted image file...

Sun Microsystems Java GIF image processing buffer overflow

Overview A vulnerability in the Sun Java Runtime Environment may allow an attacker to execute arbitrary code on a vulnerable system. Description The Sun Java Runtime Environment JRE allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for...

Sun Java Runtime System内容提送服务器信息泄露漏洞

Sun Java System Content Delivery Server可为移动用户提供可以下载的数据服务。 Sun Java System Content Delivery Server存在未明安全错误，远程攻击者可以利用漏洞未授权访问敏感信息。 目前没有详细漏洞细节提供。 Sun Java System Content Delivery Server Solaris 5.0PU1 Sun Java System Content Delivery Server Solaris 5.0 厂商解决方案 联系供应商安装patch 5.02005Q4IR3P6补丁：...

CVE-2007-0114: Undefined Security Weakness

Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspecified vectors...

CVE-2007-0114

The CVE-2007-0114 issue affects Sun Java System Content Delivery Server 5.0 and 5.0 PU1. It permits remote attackers to obtain sensitive information about content details via unspecified vectors, indicating an information-disclosure vulnerability. The available documentation does not specify the ...

Sun Java JRE vulnerable to arbitrary code execution via an unspecified error

Overview A vulnerability in the Sun Java Runtime Environment may allow an attacker to execute arbitrary code on a vulnerable system. Description The Sun Java Runtime Environment JRE allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for...

Sun Java JRE vulnerable to privilege escalation

Overview A vulnerability in the Sun Java Runtime Environment may allow a malicious applet to gain elevated privileges. Description The Sun Java Runtime Environment JRE allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for multiple operati...

CVE-2006-6731

Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...

CVE-2006-6736

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6745

Multiple unspecified vulnerabilities in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, and Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges,...