705 matches found
OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the...
OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the...
Critical: Red Hat Security Advisory: java-1.7.0-openjdk security update
Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
CVE-2013-2426
CVE-2013-2426 is an unspecified vulnerability in the Java Runtime Environment (JRE) component, affecting Oracle Java SE 7 Update 17 and earlier and OpenJDK 6 and 7, with unknown vectors related to Libraries. The impact is confidentiality, integrity, and availability, as stated in the CVS descript...
CVE-2013-2422
CVE-2013-2422 is an unspecified vulnerability in the Java Runtime Environment (JRE) component that Oracle and related advisories group with the April 2013 CPU. It affects Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and OpenJDK 6/7, allowing remote attackers to affect confiden...
CVE-2013-2422
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the...
PT-2013-3760
Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 17 and earlier OpenJDK versions 6 and 7 Description The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. It is reportedly related to the...
Mac OS X : Java for Mac OS X 10.6 Update 15
The remote Mac OS X host has a version of Java for Mac OS X 10.6 that is missing Update 15, which updates the Java version to 1.6.045. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the...
CVE-2013-2426
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from t...
PT-2013-3757
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 17 and earlier Oracle Java SE versions 6 Update 43 and earlier OpenJDK versions 6 and 7 Description The issue affects confidentiality, integrity, and availability via unknown vectors related to Libraries. It is...
Ubuntu Update for openjdk-6 USN-1755-1
Check for the Version of openjdk-6 OpenVAS Vulnerability Test $Id: gbubuntuUSN17551.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for openjdk-6 USN-1755-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
CVE-2013-0401
The Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competiti...
USN-1755-2: OpenJDK 7 vulnerabilities
USN-1755-1 fixed vulnerabilities in OpenJDK 6. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK did not properly validate certain types of images. A remote attacker could exploit this to cause OpenJDK to crash. CVE-2013-0809 I...
Chrome, Firefox, Java, IE10 exploited at Pwn2Own competition
During the first day of Pwn2Own competition at the CanSecWest conference in Vancouver , latest versions of all major browsers were exploited by hackers. Chrome, Firefox and Internet Explorer 10 on Windows 8 were successfully pwned by various competitors, bringing them tens of thousands of dollars...
Mac OS X : Java for Mac OS X 10.6 Update 14
The remote Mac OS X host has a version of Java for Mac OS X 10.6 that is missing Update 14, which updates the Java version to 1.6.043. It is, therefore, affected by two security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the...
Important: java-1.7.0-openjdk
Issue Overview: Multiple improper permission check issues were discovered in the JMX and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CVE-2013-1486, CVE-2013-1484 An improper permission check issue was discover...
RedHat Update for java-1.6.0-openjdk RHSA-2013:0274-01
Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2013:0274-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
RedHat Update for java-1.7.0-openjdk RHSA-2013:0275-01
Check for the Version of java-1.7.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.7.0-openjdk RHSA-2013:0275-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Facebook Says Employee Laptops Compromised in 'Sophisticated' Attack
Laptops belonging to several Facebook employees were compromised recently and infected with malware that the company said was installed through the use of a Java zero-day exploit that bypassed the software’s sandbox. Facebook claims that no user data was affected by the attack and says that it ha...
CentOS Update for java CESA-2013:0245 centos6
Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:0245 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...