CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

CVE-2007-4381 is a font-parsing vulnerability in Sun JDK/JRE up to specified versions (5.0 Update 9 and earlier; 1.4.2_14 and earlier) that could let an untrusted applet gain the same privileges as the user running the applet, enabling unauthorized actions via an applet. Public advisories from Re...

CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-3922

CVE-2007-3922 describes an unspecified vulnerability in the Sun JDK/JRE applet class loader that allows a remote attacker to violate the applet’s outbound connection restrictions by connecting to localhost services on the host that loaded the applet. Affected products/versions include Sun JDK/JRE...

Sun JSSE SSL/TLS握手处理拒绝服务漏洞

BUGTRAQ ID: 24846 CNCAN ID:CNCAN-2007071109 Sun JSSE是一款用于应用程序中提供数据传输安全性的安全套接字扩展。 多个Java实时环境中的Sun JSSE不正确处理SSL/TLS握手请求，远程攻击者可以利用漏洞对使用JSSE支持SSL/TLS的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun SDK Windows Production Release 1.4.2 15 Sun SDK Windows Production Release 1.4.214 Sun SDK Windows Production Release...

CVE-2007-3716

The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715...

Sql injection

The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715...

CVE-2007-3716

The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715...

CVE-2007-3716

The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715...

CVE-2007-3698

The Java Secure Socket Extension JSSE in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.211 through 1.4.214, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service CPU consumption via certain SSL/TLS handshake...

CVE-2007-3698

The CVE-2007-3698 issue affects the Java Secure Socket Extension (JSSE) in Sun JDK/JRE, including Sun JDK/JRE 6 Update 1 and earlier, JDK/JRE 5.0 Updates 7–11, and SDK/JRE 1.4.2_11–1.4.2_14, where crafted SSL/TLS handshake requests could cause the Java Runtime Environment to stop responding (deni...

Sun Java Web Start任意文件覆盖权限提升漏洞

BUGTRAQ ID: 24695 Java Web Start是用于简化在客户端部署Java应用程序的技术。 Java Web Start在处理应用程序的访问权限时存在漏洞，攻击者可能利用此漏洞提升自己的权限。 Java Web Start中的安全漏洞允许不可信任的应用程序给予其本身覆盖任何运行应用程序用户可写文件的权限，包括用户的.java.policy文件，这允许应用程序调用applet或Java Web Start应用程序，以运行不可信任应用程序的权限执行任意指令。 Sun JDK = 5.0 Update 11 Sun JRE = 5.0 Update 11 Sun JRE...

CVE-2007-3503

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3503

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3503

The CVE-2007-3503 issue affects Sun JDK 6 and JDK 5.0 Update 11 where the Javadoc tool can generate HTML documentation pages containing cross-site scripting (XSS). A remote attacker could inject arbitrary web script or HTML via unspecified vectors. Supported documents note this as part of broader...

GLSA-200705-23 : Sun JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200705-23 Sun JDK/JRE: Multiple vulnerabilities An unspecified vulnerability involving an 'incorrect use of system classes' was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security Team reporte...

Sun JDK JPG/BMP解析存在多个漏洞

Sun JDK存在多个安全问题，攻击者可以利用漏洞使应用程序崩溃，也可能执行任意指令。 Sun JDK解析特殊构建的JPG/BMP文件存在问题，目前没有详细漏洞细节提供。 Sun JDK 1.5 07-b03 JDK 1.5.011-b03和1.6.001-b06不受此漏洞影响： http://java.sun.com/ 攻击者可以参考如下测试文件： http://www.securityfocus.com/data/vulnerabilities/exploits/24004.bmp...

Sun Java JDK 1.x - Multiple Vulnerabilities

Sun Java JDK 1.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary...

Sun Java JDK 1.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary code, which may facilitate a compromise of t...