CVE-2007-3504

Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite...

Cross site scripting

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3503

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3504

CVE-2007-3504 describes a directory traversal vulnerability in the PersistenceService of Sun Java Web Start (JDK/JRE 5.0 Update 11 and earlier; Java Web Start in SDK/JRE 1.4.2_13 and earlier) on Windows. An application that grants itself file overwrite privileges can cause unauthorized actions, p...

CVE-2007-3503

The CVE-2007-3503 issue affects Sun JDK 6 and JDK 5.0 Update 11 where the Javadoc tool can generate HTML documentation pages containing cross-site scripting (XSS). A remote attacker could inject arbitrary web script or HTML via unspecified vectors. Supported documents note this as part of broader...

GLSA-200705-23 : Sun JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200705-23 Sun JDK/JRE: Multiple vulnerabilities An unspecified vulnerability involving an 'incorrect use of system classes' was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security Team reporte...

Sun JRE / JDK multiple security vulnerabilities

Buffer and integer overflows in JPG and BMP processing, sandbox protection bypass with system classes...

CVE-2007-2788

CVE-2007-2788 describes an integer overflow in Sun JDK/JRE image parsers that can be triggered by crafted JPEG or BMP files, leading to remote arbitrary code execution or JVM crash via a buffer overflow. Affected are Sun JDK/JRE versions prior to 1.5.0_11-b03 (JDK) and prior to 1.6.x before 1.6.0...

Sun JDK JPG/BMP解析存在多个漏洞

Sun JDK存在多个安全问题，攻击者可以利用漏洞使应用程序崩溃，也可能执行任意指令。 Sun JDK解析特殊构建的JPG/BMP文件存在问题，目前没有详细漏洞细节提供。 Sun JDK 1.5 07-b03 JDK 1.5.011-b03和1.6.001-b06不受此漏洞影响： http://java.sun.com/ 攻击者可以参考如下测试文件： http://www.securityfocus.com/data/vulnerabilities/exploits/24004.bmp...

Sun Java JDK 1.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary code, which may facilitate a compromise of t...

Sun Java JDK 1.x - Multiple Vulnerabilities

Sun Java JDK 1.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary...

CVE-2007-2435

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to...

CVE-2007-2435

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to...

CVE-2007-2435

Affected software: Sun Java Web Start in JDK/JRE 5.0 Update 10 and earlier; and Java Web Start in SDK/JRE 1.4.2_13 and earlier. Root cause: incorrect use of system classes related to JNLP processing. Impact: remote attacker could cause the application to perform unauthorized actions by granting p...

CVE-2007-2435

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to...

Sun Java Web Start Unauthorized Access (102881)

According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly may allow an untrusted application to elevate its privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

GLSA-200702-07 : Sun JDK/JRE: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200702-07 Sun JDK/JRE: Execution of arbitrary code A anonymous researcher discovered that an error in the handling of a GIF image with a zero width field block leads to a memory corruption flaw. Impact : An attacker could entice a...

AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. The x86 emulation Sun's J2SE Development Kit for AMD64 contains a vulnerable version of Sun's JDK. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Su...

GLSA-200701-15 : Sun JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-15 Sun JDK/JRE: Multiple vulnerabilities Chris Evans has discovered multiple buffer overflows in Sun JDK and Sun JRE possibly related to various AWT or font layout functions. Tom Hawtin has discovered an unspecified...

ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability

ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-005.html January 16, 2007 -- CVE ID: CVE-2007-0243 -- Affected Vendor: Sun Microsystems -- Affected Products: JDK and JRE 5.0 Update 9 and earlier all platforms SD...