CVE-2011-3560

CVE-2011-3560 affects Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier. The connected documents describe an unspecified vulnerability in the Java Runtime Environment component, related to JSSE, that allows remote untrusted Java Web Start appli...

CVE-2013-0427

CVE-2013-0427 is an unspecified vulnerability in the Java Runtime Environment (JRE) component used by Oracle Java SE 7 (up to Update 11), 6 (up to Update 38), and 5.0 (up to Update 38), as well as OpenJDK 6/7. The MiracleLinux AXSA-2013-99 advisory groups CVE-2013-0427 with other JRE flaws and st...

CVE-2011-3552

CVE-2011-3552 is described in the Initial document as an unspecified vulnerability in Oracle Java SE JDK/JRE affecting Java 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier. It allows remote attackers to affect integrity via unknown vectors related to Networking. Co...

CVE-2011-0871

CVE-2011-0871 is an unspecified Swing-related vulnerability in the Java Runtime Environment that affected Oracle JREs (6u25 and earlier, 5.0u29 and earlier, 1.4.2u31 and earlier) enabling remote untrusted applets/webstart to affect confidentiality, integrity, and availability. Connected advisorie...

CVE-2013-0433

CVE-2013-0433 is an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 up to Update 11, 6 up to Update 38, and 5.0 up to Update 38, plus OpenJDK 6/7. The issue is related to Networking and, per the MiracleLinux AXSA entries, may involve deserializ...

CVE-2008-5349

Technical details for CVE-2008-5349 are not publicly available in the provided Connected Documents. Monitor for updates.

CVE-2011-3521

CVE-2011-3521 is documented across multiple advisories (including MiracleLinux AXSA:2012-13:01 and various vendor/NASL entries) as an unspecified vulnerability in the Oracle Java SE JDK/JRE stack (Java 7/6 Update27 and earlier, 5.0 Update31 and earlier) that allows remote untrusted Java Web Start...

CVE-2011-0864

CVE-2011-0864 is described in connected material as an unspecified vulnerability in the Java Runtime Environment (JRE) component across Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier. It permits remote untrusted Java Web Start applications and untruste...

CVE-2011-3549

CVE-2011-3549 affects Oracle Java SE/JDK/JRE Swing in older Java releases: JDK/JRE 6u27 and earlier, 5.0u31 and earlier, and 1.4.2_33 and earlier. The vulnerability reportedly allows remote untrusted Java Web Start apps and untrusted applets to impact confidentiality, integrity, and availability ...

CVE-2011-0814

CVE-2011-0814 is an unspecified vulnerability affecting Oracle Java SE 6 Update 25 and earlier, Java SE 5.0 Update 29 and earlier, and Java 1.4.2_31 and earlier, allowing remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. Connected adviso...

CVE-2009-1098

CVE-2009-1098 is a buffer overflow in Oracle Java SE/JRE components that can allow remote code execution via a crafted GIF image. Affected are JDK/JRE 5.0 Update 17 and earlier, 6 Update 12 and earlier, 1.4.2_19 and earlier, and 1.3.1_24 and earlier. The vulnerability enables an attacker to acces...

CVE-2013-0435

CVE-2013-0435 affects Oracle JRE 7 up to Update 11 and Java 6 up to Update 38, and OpenJDK 6/7. The vulnerability is described as unspecified in the JRE, with potential confidentiality impact via JAX-WS vectors. The connected MiracleLinux/Nessus entry confirms these products and the JAX-WS vector...

CVE-2013-0445

CVE-2013-0445 affects Oracle Java SE 7 (through Update 11), Java 6 (through Update 38), Java 5 (through Update 38) and OpenJDK 6/7. The MiracleLinux/Nessus entries corroborate an unspecified vulnerability in the JRE component that can affect confidentiality, integrity, and availability via vector...

CVE-2009-1097

Technical details for CVE-2009-1097 are not publicly provided in the supplied documents. The initial entry mentions buffer overflows in JDK/JRE 6 Update 12 and earlier but no concrete remediation or impact details are given here. Monitor for updates.

CVE-2013-0409

CVE-2013-0409 refers to an unspecified JRE vulnerability in Oracle Java SE 7u11, 6u38, and 5.0u38, exploitable remotely via JMX to affect confidentiality (partial). The connected Nessus entry confirms affected packages and lists this CVE among others; no explicit patch/remediation details are pro...

CVE-2010-4448

CVE-2010-4448 is described as an unspecified vulnerability in the Java Runtime Environment (JRE) within Oracle Java SE and Java for Business, affecting 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier. It allegedly allows remote untrusted Java Web Start applications and un...

CVE-2011-0815

CVE-2011-0815 is described here as an unspecified vulnerability in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier that could allow remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availab...

CVE-2013-0423

The CVE-2013-0423 entry affects IBM WebSphere ILOG JRules and IBM WebSphere Operational Decision Manager via bundled Java components. The IBM bulletin confirms impact on IBM WebSphere ILOG JRules v7.1.1 (Windows with provided JDK) and IBM ODM v7.5 and v8.0 across distributed platforms. Remediatio...

CVE-2009-3869

CVE-2009-3869 : A stack-based buffer overflow in the Abstract Window Toolkit (AWT) setDiffICM function of the Java Runtime Environment allows remote code execution. Affected products include Sun/Oracle Java SE/JDK/JRE 5.0 before Update 22, JDK/JRE 6 before Update 17, SDK/JRE 1.3.x before 1.3.1_27...

CVE-2008-3109

Technical details for CVE-2008-3109 are not provided in the supplied connected documents. Monitor for updates.

CVE-2012-3213

CVE-2012-3213 is listed in connected IBM advisories alongside multiple JRE vulnerabilities. The Nessus/NASL entry confirms an unspecified vulnerability in Oracle JRE (Java SE 7u11 and 6u38) that could affect confidentiality, integrity, and availability through scripting, with remote exploitation....

CVE-2013-0450

CVE-2013-0450 affects Oracle JRE 7 up to Update 11, Oracle JDK 6/7 up to Update 38, OpenJDK 6/7. Root cause per sources: improper access control context checks in JMX RequiredModelMBean. Impact: remote attackers can affect confidentiality, integrity, and availability via JMX-related vectors. Publ...

CVE-2011-3553

CVE-2011-3553 affects Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier. The vulnerability is described as unspecified in the Java Runtime Environment component, with impact on confidentiality (partial) and no integrity/availability impact stated, related to JAXWS...

CVE-2013-0446

CVE-2013-0446 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 up to Update 11 and Java SE 6 up to Update 38, exploitable remotely via Deployment, with potential impact to confidentiality, integrity, and availability. The provided sources identif...

CVE-2009-1093

CVE-2009-1093 affects the LDAP service in Java SE (JDK/JRE) by failing to close the LDAP connection when initialization fails, causing a denial of service (LDAP service hang). Affected are JDK/JRE versions: 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.3.1_24 and earlier; and 1.4.2_19 and...

CVE-2010-0848

CVE-2010-0848 is referenced in connected records as an OpenJDK/OpenJRE issue: a missing input validation flaw in the JRE could cause an untrusted applet or application to crash. Affected context in the provided OpenVAS/Nessus entries ties this CVE to Java 6/OpenJDK components, notably in SL/Fedor...

CVE-2009-1095

CVE-2009-1095 : Integer overflow in unpack200 within Java SE/JRE up to JDK/JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier. This vulnerability enables a remote attacker to gain access to files or execute arbitrary code by delivering a crafted Pack200 header inside a JAR. The provided d...

CVE-2011-3554

CVE-2011-3554 affects Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier. The MiracleLinux AXSA advisory (AXSA:2012-13:01) describes an unspecified vulnerability in the Java Runtime Environment component that allows remote untrusted Java Web Start applications and un...

CVE-2008-2086

CVE-2008-2086 affects Sun Java Web Start and Java Plug-in used by JDK/JRE 6 Update 10 and earlier; JDK/JRE 5.0 Update 16 and earlier; SDK/JRE 1.4.2_18 and earlier. It arises from a crafted jnlp file that modifies the java.home, java.ext.dirs, or user.home System Properties, enabling remote attack...

CVE-2009-1101

Technical details for CVE-2009-1101 are not provided in the connected documents. Monitor for updates; no concrete root-cause, affected products, or fixes are specified here.

CVE-2013-0419

CVE-2013-0419 affects Oracle Java SE JRE: Java 7 up to update 11 and Java 6 up to update 38. The vulnerability, linked to Deployment, is described as unspecified with unknown vectors, and impacts confidentiality, integrity, and availability. In IBM WebSphere contexts, remediation references APAR ...

CVE-2008-5353

CVE-2008-5353 affects Sun JDK/JRE families: JRE/JDK 6 up to update 10, Java 5.0 up to update 16, and SDK/JRE 1.4.2 up to 1.4.2_18. It is caused by improper enforcement of ZoneInfo object contexts during deserialization, allowing remote attackers to elevate privileges by deserializing Calendar obj...

CVE-2009-3873

CVE-2009-3873 is the OpenJDK/Sun JPEG Image Writer quantization vulnerability. The issue allows remote attackers to gain privileges by crafting a malicious image file. Affected products include Sun Java SE JDK/JRE 5.0 prior to Update 22, JDK/JRE 6 prior to Update 17, and SDK/JRE 1.4.x prior to 1....

CVE-2013-1473

CVE-2013-1473 is described as an unspecified vulnerability in the JRE Deployment component of Oracle Java SE 7 (up to Update 11) and Java SE 6 (up to Update 38). Connected IBM bulletins identify this CVE among a set of IBM JRE/JRules/ODM vulnerabilities and provide remediation: RS01283 with Windo...

CVE-2013-1487

CVE-2013-1487 is listed in IBM advisories as one of multiple vulnerabilities in the IBM Java Runtime Environment (JRE) components used by IBM WebSphere ILOG JRules and IBM Operational Decision Manager. The IBM bulletins for WebSphere ILOG JRules 7.1.1 (Windows) and ODM 7.5/8.0 identify CVE-2013-1...

CVE-2009-1100

CVE-2009-1100 affects Oracle Java SE/JDK/JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier. Vulnerable component: temporary font file handling and (1) limits on Font creation (CR 6522586) and (2) another unspecified vector (CR 6632886). Impact: remote denial of service via disk consumpti...

CVE-2009-2676

CVE-2009-2676 describes an unspecified vulnerability in Sun Java SE/JDK/JRE (up to 6 Update 14, 5.0 Update 19, and 1.4.2_21) involving the JNLPAppletLauncher. Affected component is the JNLPAppletLauncher exposed to untrusted applets; the root cause is an issue in how an old launcher can be access...

CVE-2009-3877

CVE-2009-3877 affects Sun Java SE/JRE/JDK across multiple releases: JRE/JDK 5.0 before Update 22, JRE/JDK 6 before Update 17, and older 1.3.x before 1.3.1_27 and 1.4.x before 1.4.2_24. Root cause: the ASN.1 DER input stream parser fails to properly parse crafted HTTP headers, enabling a remote at...

CVE-2010-4465

CVE-2010-4465 is described in the MiracleLinux AXSA:2011-61:02 advisory as an unspecified vulnerability in the Java Runtime Environment that affects Oracle Java SE/Java for Business up to certain older builds. The issue is associated with Swing and allows remote untrusted Java Web Start applicati...

CVE-2012-3342

CVE-2012-3342 is listed in IBM security advisories as part of a set of Java/JRE related flaws. IBM reports affected products as IBM WebSphere ILOG JRules V7.1.1 (Windows with a provided JDK) and IBM Operational Decision Manager V7.5/V8.0 (all distributed platforms). Remediation is via APAR RS0128...

CVE-2010-3571

Technical details for CVE-2010-3571 are not publicly provided in the connected documents. No specifics on affected products/versions, root cause, or fix are available here. Monitor for updates.

CVE-2011-3551

Affected software : Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier. Vulnerability : Unspecified issue in the Java Runtime Environment with vectors related to 2D that could affect confidentiality, integrity, and availability. Impact : As stated, remote attackers...

CVE-2013-1486

CVE-2013-1486 is listed in MiracleLinux AXSA:2013-99:01 for MiracleLinux 4 (java-1.6.0-openjdk). Description: an unspecified vulnerability in the JRE component allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. Remediation in the advisory in...

CVE-2008-5360

CVE-2008-5360 affects Java Runtime Environment (JRE/JDK) across multiple versions (Sun JDK/JRE 6 Update 10 and earlier; 5.0 Update 16 and earlier; 1.4.2_18 and earlier; 1.3.1_23 and earlier).Description states the vulnerability: JRE creates temporary files with predictable file names, enabling at...

CVE-2009-3876

CVE-2009-3876 affects Sun Java SE/JRE/JDK components. The vulnerability stems from the ASN.1 DER input stream parser failing to properly decode crafted DER-encoded data, allowing remote attackers to cause a denial of service via memory consumption. Affected products include Sun JRE/JDK 5.0 before...

CVE-2009-1094

CVE-2009-1094 affects multiple Java SE components (JDK/JRE) earlier than specified Update/Release levels across 5.0 Update 17 and earlier; 6 Update 12 and earlier; JDK/JRE 1.3.1_24 and earlier; 1.4.2_19 and earlier. The vulnerability is described as an unspecified remote code execution via LDAP, ...

CVE-2009-2670

CVE-2009-2670 affects Sun Java Runtime Environment (JRE) in JDK/JRE 6 prior to Update 15 and JDK/JRE 5.0 prior to Update 20. The issue arises from the JRE audio system not preventing access to java.lang.System properties by untrusted applets and Java Web Start applications, enabling a context-dep...

CVE-2010-3562

CVE-2010-3562 is tied to OpenJDK/IcedTea's IndexColorModel double-free bug. US/EU advisories (e.g., openSUSE SUSE-11_3_JAVA-1_6_0-SUN-101019, Gentoo GLSA 201406-32) enumerate CVE-2010-3562 among the openJDK issues, but the connected documents provide only high‑level notes: a double-free in IndexC...

CVE-2007-2789

CVE-2007-2789 concerns the BMP image parser in Sun JDK/JRE on Unix/Linux, where untrusted applets or applications that open arbitrary local files via a crafted BMP can cause the JVM to hang (DoS). Affected product ranges include JDK/JRE prior to 1.5.0_11-b03, 1.6.x prior to 1.6.0_01-b06, and olde...

CVE-2008-3112

Technical details about CVE-2008-3112 (affected product, root cause, impact, and fix) are not provided in the connected documents. The initial description gives only high-level vulnerability information. Monitor for official advisories for updates.