OpenJDK RSA public key length denial-of-service (6497740)

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service CPU consumption via a crafted RSA public key...

Java Web Start Buffer overflow vulnerabilities (6557220)

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by a an application that grants itself...

Sun Java System Identity Manager XSS

Binary data 4341.prm...

security flaw

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2007-0243

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

CVE-2005-3905

CVE-2005-3905 corresponds to the Java Reflection API vulnerabilities in Sun/Blackdown JDK/JRE prior to the fixed updates, enabling remote code execution by escaping the sandbox via the Reflection API. Affected: Java SDK/JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK/JRE 5.0 Update 3 and ...

HP-UX PHSS_22407 : s700_800 11.00 OV NNM6.1 pmd exception/core dump

s700800 11.00 OV NNM6.1 pmd exception/core dump : The remote HP-UX host is affected by multiple vulnerabilities : - Java SNMP MIB Browser Object ID parsing problem. - ovalarmsrv buffer overrun potential. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in...

KDE Security Advisory: Konqueror Java Vulnerability

KDE Security Advisory: Konqueror Java Vulnerability Original Release Date: 2004-12-20 URL: http://www.kde.org/info/security/advisory-20041220-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1145 http://www.heise.de/security/dienste/browsercheck/tests/java.shtml 1. Syste...

Multiple bwosers Java privilege escalation

It's possible to access local files...

opera -- multiple vulnerabilities in Java implementation

Marc Schoenefeld reports: Opera 7.54 is vulnerable to leakage of the java sandbox, allowing malicious applets to gain unacceptable privileges. This allows them to be used for information gathering spying of local identity information and system configurations as well as causing annoying crash...

CVE-2003-0871

Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."...

Sun Java 1.x - XML Document Nested Entity Denial of Service

Sun Java 1.x - XML Document Nested Entity Denial of Service source: https://www.securityfocus.com/bid/8666/info A problem has been identified in Sun Java when handling XML documents with specific constructs. Because of this, an attacker with the ability to cause the software to parse malicious XM...

Sun Java 1.x - XML Document Nested Entity Denial of Service

source: https://www.securityfocus.com/bid/8666/info A problem has been identified in Sun Java when handling XML documents with specific constructs. Because of this, an attacker with the ability to cause the software to parse malicious XML documents may have the ability to crash a system hosting S...

CVE-2002-1293

The Microsoft Java implementation, as used in Internet Explorer, provides a public load0 method for the CabCracker class com.ms.vm.loader.CabCracker, which allows remote attackers to bypass the security checks that are performed by the load method...

Microsoft Windows Media Player 7.0 - .wmz Arbitrary Java Applet

Microsoft Windows Media Player 7.0 - .wmz Arbitrary Java Applet source: https://www.securityfocus.com/bid/2203/info A vulnerability has been reported in Microsoft Windows Media Player 7 which is exploitable through Internet Explorer and Java. Skins are downloadable files which change the appearan...

Microsoft Windows Media Player 7.0 - '.wmz' Arbitrary Java Applet

source: https://www.securityfocus.com/bid/2203/info A vulnerability has been reported in Microsoft Windows Media Player 7 which is exploitable through Internet Explorer and Java. Skins are downloadable files which change the appearance of a program's user interface. Skins for Windows Media Player...

Internet Security Systems Security Alert: Brown Orifice, BOHTTPD, a Platform Independent Java Vulnerability in Netscape

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Alert August 7, 2000 Brown Orifice, BOHTTPD, a Platform Independent Java Vulnerability in Netscape Synopsis: On August 5th, code was made public by Dan Brumleve, which demonstrates a serious security hole in the Netscape Java...