Protection against Black Hole Toolkit v1.2.3 Java Array Exploits (CVE-2009-1671; CVE-2012-0507)

A buffer overflow vulnerability has been reported in Sun Java SE Runtime Environment...

CVE-2009-1671

Sun Java SE Runtime Environment (JRE) 6 Update 13 includes the deploytk.dll Deployment Toolkit ActiveX control (version 6.0.130.3) that contains multiple buffer-overflow vulnerabilities. A long string argument to methods setInstallerType, setAdditionalPackages, compareVersion, getStaticCLSID, or ...

CVE-2009-1671

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...