CVE-2009-1107

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

Design/Logic Flaw

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

CVE-2009-1103

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.219 and earlier; and 1.3.124 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors...

CVE-2009-1106

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

CVE-2009-1107

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

Design/Logic Flaw

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490...

Buffer overflow

Buffer overflow in unpack200 in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers...

CVE-2009-1107

CVE-2009-1107 involves the Java Plug-in in JDK/JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier. The vulnerability, tied to a Swing JLabel HTML parsing issue (CR 6782871), lets remote attackers trick a user into trusting a signed applet by misrepresenting the security warning dialog. Th...

CVE-2009-1093

CVE-2009-1093 affects the LDAP service in Java SE (JDK/JRE) by failing to close the LDAP connection when initialization fails, causing a denial of service (LDAP service hang). Affected are JDK/JRE versions: 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.3.1_24 and earlier; and 1.4.2_19 and...

CVE-2009-1106

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

CVE-2009-1095

Integer overflow in unpack200 in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers...

CVE-2009-1105

CVE-2009-1105 affects the Java Plug-in in JDK/JRE 6 Update 12, 11, and 10. The issue allows a user‑assisted remote attacker to cause a trusted applet to execute in an older JRE version, enabling exploitation of vulnerabilities present in that older runtime. The description from SUSE corroborates ...

CVE-2009-1106

CVE-2009-1106 affects Java Plug-in in JDK/JRE 6 Update 12, 11, and 10. The crossdomain.xml parser can be bypassed, allowing a remote attacker to connect to arbitrary sites and bypass access restrictions. Documented impact includes partial integrity and partial availability, with no confidentialit...

CVE-2009-1104

The CVE-2009-1104 issue affects the Java Plug-in in JDK/JRE, specifically versions 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier. The root cause is that the Java Plug-in does not prevent Javascript loaded from localhost from connecting to other ports on the system v...

CVE-2009-1102

Technical details about CVE-2009-1102 are not provided in the connected documents. Please monitor for updates from vendors and security advisories.

CVE-2009-1100

CVE-2009-1100 affects Oracle Java SE/JDK/JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier. Vulnerable component: temporary font file handling and (1) limits on Font creation (CR 6522586) and (2) another unspecified vector (CR 6632886). Impact: remote denial of service via disk consumpti...

CVE-2009-1094

CVE-2009-1094 affects multiple Java SE components (JDK/JRE) earlier than specified Update/Release levels across 5.0 Update 17 and earlier; 6 Update 12 and earlier; JDK/JRE 1.3.1_24 and earlier; 1.4.2_19 and earlier. The vulnerability is described as an unspecified remote code execution via LDAP, ...

CVE-2009-1103

The CVE-2009-1103 entry concerns the Java Plug-in in JDK/JRE (versions listed in the description) with an issue linked to deserializing applets (CR 6646860). Affected products include Java Plug-in for Java SE 5.0u17 and earlier, 6u12 and earlier, 1.4.2_19 and earlier, and 1.3.1_24 and earlier. Th...

CVE-2009-1096

Technical details for CVE-2009-1096 are not publicly provided in the connected documents. No concrete affected products, versions, or fixes are specified beyond the initial description. Monitor for updates.

CVE-2009-1093

LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier does not close the connection when initialization fails, which allows remote attackers to cause ...