9004 matches found
CVE-2009-2475
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...
CVE-2009-2476
CVE-2009-2476 affects Sun Java SE 6 prior to Update 15 and OpenJDK. The issue is a bypass of OpenType checks, allowing a context-dependent attacker to obtain a reference to a privileged object via finalizer resurrection, effectively bypassing access restrictions. Impact is described as complete c...
CVE-2009-2690
CVE-2009-2690 affects Sun Java SE 6 before Update 15 and OpenJDK. The issue is an information disclosure where the encoder grants read access to private variables with unspecified names, potentially leaking sensitive data via a trusted applet or application. Related vulnerability discussions are ...
CVE-2009-2689
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted 1 applet or 2 application...
CVE-2009-2475
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1161)
The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...
openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1162)
The Sun Java JRE /JDK 5 was updated to Update 20 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1161)
The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...
CVE-2009-2690
The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted 1 applet or 2 application...
openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1162)
The Sun Java JRE /JDK 5 was updated to Update 20 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...
Sun Java运行时环境XML解析拒绝服务漏洞
BUGTRAQ ID: 35958 CVECAN ID: CVE-2009-2625 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE在解析包含有非预期字节值和递归括号的XML元素时可能导致程序越界访问内存或陷入死循环。攻击者可以通过诱骗用户打开特制文件或向服务器提交恶意XML内容来利用这个漏洞，导致拒绝服务的情况。 Sun JDK 6 Sun JDK 5.0 Sun JRE 6 Sun JRE 5.0 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:1199-01）以及相应补丁:...
JNLPAppletLauncher库创建任意文件漏洞
BUGTRAQ ID: 35946 CVECAN ID: CVE-2009-2676 JNLPAppletLauncher是一个基于JNLP的applet启动器类，允许applet使用Java 3D、JOGL、JOAL等扩展。 JNLPAppletLauncher中的安全漏洞可能影响Sun JDK和JRE用户。不可信任的Java Applet可能导致旧版的JNLPAppletLauncher向下载和运行不可信任的applet用户的系统上写入任意文件。出现这个漏洞时用户会看到警告对话框说明数字签名已过期。 Sun JDK 6 Sun JDK 5.0 Sun JRE 6 Sun JRE 5....
Sun Java运行时环境音频系统信息泄露漏洞
BUGTRAQ ID: 35939 CVECAN ID: CVE-2009-2670 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Java运行时环境音频系统中的安全漏洞可能允许不可信任的Applet或Java Web Start应用访问java.lang.System属性。 Sun JDK 6 Sun JDK 5.0 Sun JRE 6 Sun JRE 5.0 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:1199-01）以及相应补丁: RHSA-2009:1199-01：Critical:...
Sun VirtualBox宿主系统本地拒绝服务漏洞
Bugraq ID: 35960 CNCAN ID：CNCAN-2009080703 Sun VirtualBox是一款功能强大的x86虚拟机软件。 Sun VirtualBox 3.0存在安全问题，允许VirtualBox虚拟机中的非特权用户重新启动宿主操作系统，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun VirtualBox 3.0.2 Sun VirtualBox 3.0 厂商解决方案 用户可升级到Sun VirtualBox 3.0.4版本： http://www.virtualbox.org/...
Sun Java multiple security vulnerabilities
Integer overflow on JAR-files unpacking. Integer overflow on JPEG parsing...
ZDI-09-049: Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability
ZDI-09-049: Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-049 August 5, 2009 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- Vulnerability Details: This vulnerability allow...
ZDI-09-050: Sun Java Web Start JPEG Header Parsing Integer Overflow Vulnerability
ZDI-09-050: Sun Java Web Start JPEG Header Parsing Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-050 August 5, 2009 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- Vulnerability Details: This vulnerability allows...
iDefense Security Advisory 08.06.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability
iDefense Security Advisory 08.04.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 04, 2009 I. BACKGROUND Pack200 is a compression method introduced by Sun in the 1.5 release of the JRE. It is used to compress JAR files, and is optimized for the compression of Java class files. A Java...
CVE-2009-2713
The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On CDSSO is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors...