CVE-2009-1096

Technical details for CVE-2009-1096 are not publicly provided in the connected documents. No concrete affected products, versions, or fixes are specified beyond the initial description. Monitor for updates.

CVE-2009-1100

CVE-2009-1100 affects Oracle Java SE/JDK/JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier. Vulnerable component: temporary font file handling and (1) limits on Font creation (CR 6522586) and (2) another unspecified vector (CR 6632886). Impact: remote denial of service via disk consumpti...

CVE-2009-1103

The CVE-2009-1103 entry concerns the Java Plug-in in JDK/JRE (versions listed in the description) with an issue linked to deserializing applets (CR 6646860). Affected products include Java Plug-in for Java SE 5.0u17 and earlier, 6u12 and earlier, 1.4.2_19 and earlier, and 1.3.1_24 and earlier. Th...

CVE-2009-1107

CVE-2009-1107 involves the Java Plug-in in JDK/JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier. The vulnerability, tied to a Swing JLabel HTML parsing issue (CR 6782871), lets remote attackers trick a user into trusting a signed applet by misrepresenting the security warning dialog. Th...

CVE-2009-1106

CVE-2009-1106 affects Java Plug-in in JDK/JRE 6 Update 12, 11, and 10. The crossdomain.xml parser can be bypassed, allowing a remote attacker to connect to arbitrary sites and bypass access restrictions. Documented impact includes partial integrity and partial availability, with no confidentialit...

CVE-2009-1106

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

CVE-2009-1093

LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier does not close the connection when initialization fails, which allows remote attackers to cause ...

CVE-2009-1098

Buffer overflow in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.219 and earlier; and 1.3.124 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998...

Ubuntu: Security Advisory (USN-713-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JRE allows unauthorized file access and connections to localhost

Unspecified vulnerability in Java Runtime Environment JRE with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make...

Sun Java JDK/JRE安全更新修复多个漏洞

BUGTRAQ ID: 32620,32608 CVECAN ID:...

Integer overflow

Integer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which...

Deserialization of untrusted data

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

Memory corruption

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...

Design/Logic Flaw

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the 1 JAX-WS and 2 JAXB packages...

Security feature bypass

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service CPU consumption via a crafted RSA public key...

CVE-2008-5357

Integer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which...

CVE-2008-5356

Heap-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file...

CVE-2008-5342

Unspecified vulnerability in the BasicService for Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted downloaded applications to cause local files to be displayed in the brows...