security flaw

Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...

CVE-2007-0243

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

Fedora Core 5 : openoffice.org-2.0.2-5.16.2 (2006-770)

CVE-2006-2198 macro security - CVE-2006-2199 java applets - CVE-2006-3117 corrupt file format more details at http://www.openoffice.org/security/bulletin-20060629.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2006-6737

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6736

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6731

Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...

CVE-2006-6745

CVE-2006-6745 describes serialization-related flaws in Sun JDK/JRE 5.0 Update 7 and earlier, and Java SDK/JRE 1.4.2_12 and earlier 1.4.x, that could allow an untrusted Java applet or application to gain privileges. The connected advisories confirm these issues affect multiple IBM Java runtimes as...

CVE-2006-6737

CVE-2006-6737 affects Sun JDK/JRE 5.0 Update 5 and earlier, J2SDK/JRE 1.4.2_10 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issue allows an untrusted applet to access data in other applets (cross-applet data access). Red Hat and SUSE/OpenVAS entries confirm IBM/Java updates mitigate...

CVE-2006-6736

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6737

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6736: Undefined Security Weakness

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6737: Undefined Security Weakness

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6745: Undefined Security Weakness

Multiple unspecified vulnerabilities in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, and Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges,...

Mozilla Firefox/SeaMonkey/Thunderbird多个安全漏洞

Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla开发的WEB浏览器和邮件客户端等套件。 Mozilla Firefox/SeaMonkey/Thunderbird存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息，执行任意代码，提升特权等攻击。 具体包含： -当使用CSS指针属性设置指针到部分图象时，在转换图象到Windows bitmap时由于错误的大小处理会导致堆溢出。 -使用JavaScript watch可导致特权提升。 -bridge代码允许Java applets和JavaScript通信，由于重用已经释放的对象可导致应用程序崩溃。...

Sun Java运行时环境多个远程权限提升漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Java运行时环境中存在两个序列化相关的漏洞，可能允许不可信任的Applet或应用程序提升权限。 Sun JRE = 5.0 Update 7 Sun SDK = 1.4.212 Sun已经为此发布了一个安全公告（Sun-Alert-102731）以及相应补丁: Sun-Alert-102731：Security Vulnerabilities Related to Serialization in the Java Runtime Environment may Allow Untrusted Applets ...

Mozilla Foundation Security Advisory 2006-71

Mozilla Foundation Security Advisory 2006-71 Title: LiveConnect crash finalizing JS objects Impact: Critical Announced: December 19, 2006 Reporter: Steven Michaud Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.1 Firefox 1.5.0.9 Thunderbird 1.5.0.9 SeaMonkey 1.0.7 Description...

Sun Java sandbox protection bypass

Swing library functions may access data from different applets...

GLSA-200607-12 : OpenOffice.org: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200607-12 OpenOffice.org: Multiple vulnerabilities Internal security audits by OpenOffice.org have discovered three security vulnerabilities related to Java applets, macros and the XML file format parser. Specially crafted Java...

OpenOffice.org: Multiple vulnerabilities

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Internal security audits by OpenOffice.org have discovered three security vulnerabiliti...

OpenOffice.org may fail to properly contain certain Java applets

Overview The OpenOffice.org team has reported a vulnerability in how the 1.1 and 2.0 versions of OpenOffice.org handle certain Java applets. Description OpenOffice.org is an office suite that is available for multiple operating systems, including Windows, Linux, Apple Mac OS X, and BSD. It includ...