Security Bulletin: Unspecified Vulnerabilities in Rational Synergy (CVE-2012-0502,CVE-2012-0503,CVE-2012-0506,CVE-2012-0507,CVE-2011-3563,CVE-2012-0500,CVE-2012-0497,CVE-2012-0498,CVE-2012-0499,CVE-2012-0500,CVE-2012-0501,CVE-2012-0505,CVE-2011-5035)

Summary Vulnerabilities in the Java Runtime Environment JRE 6 update 32 and earlier component shipped with IBM Rational Synergy may affect the security of the product. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this...

CVE-2014-3068: Undefined Security Weakness

IBM Java Runtime Environment JRE 7 R1 before SR1 FP1 7.1.1.1, 7 before SR7 FP1 7.0.7.1, 6 R1 before SR8 FP1 6.1.8.1, 6 before SR16 FP1 6.0.16.1, and before 5.0 SR16 FP7 5.0.16.7 allows attackers to obtain the private key from a Certificate Management System CMS keystore via a brute force attack...

CVE-2014-3065: Improper Control of Generation of Code

Unspecified vulnerability in IBM Java Runtime Environment JRE 7 R1 before SR2 7.1.2.0, 7 before SR8 7.0.8.0, 6 R1 before SR8 FP2 6.1.8.2, 6 before SR16 FP2 6.0.16.2, and before SR16 FP8 5.0.16.8 allows local users to execute arbitrary code via vectors related to the shared classes cache...

PT-2014-5061

Name of the Vulnerable Software and Affected Versions IBM Java Runtime Environment JRE versions 5.0 through 5.0.16.6 IBM Java Runtime Environment JRE versions 6.0 through 6.0.16.0 IBM Java Runtime Environment JRE versions 6.1 through 6.1.8.0 IBM Java Runtime Environment JRE versions 7.0 through...

CVE-2013-0449

CVE-2013-0449 is an unspecified vulnerability in the Oracle Java SE 7 JRE (Deployment area) up to Update 11 that could allow remote confidentiality impact. Public details in provided documents are limited; no exploitation specifics are given. Remediation across connected advisories generally invo...

PT-2011-1573

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 6 Update 23 and earlier Java Runtime Environment JRE versions 5.0 Update 27 and earlier Java Runtime Environment JRE versions 1.4.2 29 and earlier Description The issue affects confidentiality, integrity,...

PT-2011-1579

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 6 Update 23 and earlier Java Runtime Environment JRE versions 5.0 Update 27 and earlier Java Runtime Environment JRE versions 1.4.2 29 and earlier Description The issue allows remote untrusted Java Web Sta...

PT-2011-1575

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 6 Update 23 and earlier Java Runtime Environment JRE versions 5.0 Update 27 and earlier Description The issue allows remote untrusted Java Web Start applications and untrusted Java applets to affect...

PT-2011-1551

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 6 Update 23 and earlier Java Runtime Environment JRE versions 5.0 Update 27 and earlier Java Runtime Environment JRE versions 1.4.2 29 and earlier Description The issue affects confidentiality and is relat...

PT-2011-1570

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 6 Update 23 and earlier for Windows, Solaris, and Linux Java Runtime Environment JRE versions 5.0 Update 27 and earlier for Windows Java Runtime Environment JRE versions 1.4.2 29 and earlier for Windows...

PT-2011-1556

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 6 Update 23 and earlier Description The issue affects the confidentiality, integrity, and availability of systems due to an unspecified vulnerability in the Deployment component. This allows remote untrust...

CVE-2009-2670: Undefined Security Weakness

The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted applets and 2 Java Web Start applications, which allows context-dependent attackers to obtain sensiti...

CVE-2008-5358: Improper Restriction of Operations within the Bounds of a Memory Buffer

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...

CVE-2008-5347: Undefined Security Weakness

Multiple unspecified vulnerabilities in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the 1 JAX-WS and 2 JAXB packages...

CVE-2008-3109: Undefined Security Weakness

Unspecified vulnerability in scripting language support in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants itself...

CVE-2008-0628: Undefined Security Weakness

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...

CVE-2003-1301: Undefined Security Weakness

Sun Java Runtime Environment JRE 1.x before 1.4.211 and 1.5.x before 1.5.006, and as used in multiple web browsers, allows remote attackers to cause a denial of service application crash via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid...

CVE-2005-3583: Undefined Security Weakness

1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.208, 1.4.209, and 1.5.005 and possibly other versions allow remote attackers to cause a denial of service JVM unresponsive via a crafted serialized object, such as a font object as demonstrated on JBoss...

CVE-2004-0651: Undefined Security Weakness

Unknown vulnerability in Sun Java Runtime Environment JRE 1.4.2 through 1.4.203 allows remote attackers to cause a denial of service virtual machine hang...

CVE-2002-0076: Undefined Security Weakness

Java Runtime Environment JRE Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in 1 Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, 2 Netscape 6.2.1 and earlier, and...