CVE-2008-5341

CVE-2008-5341 describes an unspecified vulnerability in Sun Java Web Start (JWS) and Java Plug-in affecting Sun JDK/JRE 6 Update 10 and earlier, and JDK/JRE 5.0 Update 16 and earlier. The issue allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username ...

CVE-2010-0089

CVE-2010-0089 affects Oracle Java SE/Java for Business components (Java Web Start, Java Plug-in) in Java 6 Update 18, 5.0 Update 23, and 1.4.2_25. Connected data corroborate that multiple sources reference this CVE within a broader set of Java/VM vulnerabilities and related advisories; however, t...

CVE-2010-0091

CVE-2010-0091 is evidenced in connected Nessus entries tied to OpenJDK/OpenJRE updates for Scientific Linux Scientific Linux Security Update: java-1.6.0-openjdk (SL5.x) and related OpenJDK advisories. The described issue: unsigned applets could retrieve dragged information before the drop action ...

CVE-2010-0847

CVE-2010-0847 is described in connected Nessus/OSINT sources as an OpenJDK ImagingLib arbitrary code execution vulnerability in the Java 6 OpenJDK/OpenJDK stack (OpenJDK ImagingLib component). Affected product lineage appears to be Java 1.6/OpenJDK builds that include ImagingLib; the exact affect...

CVE-2010-3557

The CVE-2010-3557 entry concerns a Swing component vulnerability in Oracle Java SE/Java for Business. Affected products/versions are Oracle Java SE 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28. Root cause and concrete vectors are not publicly detailed in the provided documents; however, the...

CVE-2010-4466

CVE-2010-4466 concerns a vulnerability in the Deployment component of Oracle Java SE/JRE (and Java for Business) affecting multiple platforms. According to connected Red Hat advisory RHSA-2011:0870, it is categorized as a JDK Deployment-component vulnerability and is identified among several CVEs...

CVE-2010-3548

Technical details for CVE-2010-3548 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-4462

CVE-2010-4462 affects Oracle Java SE/Java for Business 6u23 and earlier, 5.0u27 and earlier, and 1.4.2_29 and earlier. The vulnerability is described as an unspecified issue in the JRE related to Sound and unspecified APIs that could impact confidentiality, integrity, and availability via remote ...

CVE-2008-5340

CVE-2008-5340 concerns an unspecified vulnerability in Java Web Start (JWS) and Java Plug-in affecting Sun JDK/JRE lines: Java SE 6 Update 10 and earlier; Java SE 5.0 Update 16 and earlier; and SDK/JRE 1.4.2_18 and earlier. The untrusted JWS applications can gain privileges to access local files ...

CVE-2008-5359

CVE-2008-5359 is a buffer overflow in the Sun Java Runtime Environment (JRE) affecting JRE/JDK versions up to: 6 Update 10 and earlier; 5.0 Update 16 and earlier; 1.4.2_18 and earlier; and 1.3.1_23 and earlier. Root cause involves a ConvolveOp operation in the AWT library, enabling a remote attac...

CVE-2009-3872

CVE-2009-3872 affects Sun Java SE/J2SE/JDK/JRE JPEG JFIF Decoder. A vulnerability in the JPEG decoding path allows remote attackers to gain privileges via a crafted image file. Affected products/versions include Sun Java 5.0 before Update 22, Java 6 before Update 17, and older SDK/JRE 1.3.x befor...

CVE-2008-5342

CVE-2008-5342 affects Sun Java implementations: BasicService for Java Web Start and Java Plug-in on Sun JDK/JRE 6u10 and earlier; JDK/JRE 5.0u16 and earlier; and SDK/JRE 1.4.2_18 and earlier. The vulnerability is described as an unspecified flaw in these components that could allow an untrusted d...

CVE-2010-4454

Technical details for CVE-2010-4454 are not publicly available in the provided documents. The initial description is unspecific and lacks concrete product/version/impact details or fixes; monitor for updates from official advisories or security feeds.

CVE-2008-3108

CVE-2008-3108 describes a buffer overflow in the font processing component of Sun JRE/JDK across multiple older Java releases (JRE 5.0 before Update 10; JRE 1.4.x before 1.4.2_18; JRE 1.3.x before 1.3.1_23). The issue could allow context-dependent attackers to gain privileges on the affected host...

CVE-2008-5356

CVE-2008-5356 describes a heap-based buffer overflow in Java Runtime Environment font parsing that can be triggered by a crafted TrueType font, potentially allowing remote code execution. Affected products include Sun JDK/JRE 6u10 and earlier, JDK/JRE 5.0u16 and earlier, and SDK/JRE 1.4.2_18 and ...

CVE-2010-0082

CVE-2010-0082 affects Oracle Java SE/Java for Business (HotSpot Server) with OpenJDK/OpenJRE components. The root cause is a loader-constraint table issue that may allow arrays beyond base classes. Affected products include Java 6 Update 18, Java 5.0 Update 23, Java 1.4.2_25, and Java 1.3.1_27. E...

CVE-2010-3551

Technical details for CVE-2010-3551 are not publicly available in the provided documents; monitoring for updates is advised.

CVE-2010-3565

CVE-2010-3565 is associated with OpenJDK/J2SE JPEG image handling (JPEGImageWriter.writeImage) and is described as enabling remote code execution via memory handling with large values in a JPEG subsample. Connected advisories explicitly reference OpenJDK/JDK contexts and list the issue among mult...

CVE-2007-2435

Affected software: Sun Java Web Start in JDK/JRE 5.0 Update 10 and earlier; and Java Web Start in SDK/JRE 1.4.2_13 and earlier. Root cause: incorrect use of system classes related to JNLP processing. Impact: remote attacker could cause the application to perform unauthorized actions by granting p...

CVE-2008-5343

Vulnerability GIFAR (CVE-2008-5343) affects Java Web Start (JWS) and Java Plug-in in Sun JDK/JRE 6u10 and earlier, JDK/JRE 5.0u16 and earlier, and SDK/JRE 1.4.2_18 and earlier. A crafted file that validates as both GIF and Java JAR can allow remote attackers to make unauthorized network connectio...

CVE-2008-5346

CVE-2008-5346 affects Sun JDK/JRE: untrusted applets and applications could read arbitrary memory via a crafted ZIP file. Affected are JRE/JDK 5.0 Update 16 and earlier; JRE 1.4.2_18 and earlier; JRE 1.3.1_23 or earlier. The connected docs confirm related advisories (e.g., RHSA entries) but do no...

CVE-2008-3114

CVE-2008-3114 affects Sun Java Web Start in JDK/JRE 6 prior to Update 7, JDK/JRE 5.0 prior to Update 16, and SDK/JRE 1.4.x prior to 1.4.2_18. The issue allows context-dependent attackers to obtain the cache location via an untrusted application (information disclosure). Remediation is to apply th...

CVE-2010-0088

CVE-2010-0088 is an Oracle Java SE/Java for Business JRE vulnerability affecting multiple older Java runtimes (e.g., Java 6 Update 18, 5.0 Update 23, 1.4.2_25, 1.3.1_27) via an unspecified vulnerability in the Java Runtime Environment. Connected sources specify the concrete issue as OpenJDK/OpenJ...

CVE-2010-3554

CVE-2010-3554 is referenced in multiple advisories as a vulnerability in the OpenJDK CORBA reflection component that was fixed by updating Java packages (e.g., IcedTea/OpenJDK builds). Connected documents confirm its inclusion in OpenJDK/OpenJDK-related patch lists and advisories; no explicit roo...

CVE-2010-4447

Technical details for CVE-2010-4447 are not publicly available in the provided connected documents; monitor for updates.

CVE-2010-0085

Technical details for CVE-2010-0085 are not publicly available in the provided documents. No explicit affected product/version or exploit information is provided here. Monitor for official advisories for updates.

CVE-2007-5019

The CVE-2007-5019 issue is a buffer overflow in the Sun Java Web Start ActiveX control of Java Runtime Environment (JRE) 1.6.0_X. The vulnerability occurs when processing a long argument to dnsResolve (isInstalled.dnsResolve), due to a boundary error in the ActiveX control. Affected component: Su...

CVE-2008-3113

CVE-2008-3113 affects Sun Java Web Start in Sun JDK/JRE 5.0 before Update 16 and J2SE 1.4.x before 1.4.2_18. The vulnerability is described as unspecified but allows remote attackers to create or delete arbitrary files via an untrusted application. The connected documents confirm the affected pro...

CVE-2010-0841

CVE-2010-0841 concerns an ImageIO/JPEGImageReader stepX integer overflow vulnerability in Oracle Java SE and Java for Business, affecting 6 Update 18, 5.0 Update 23, and 1.4.2_25. It can impact confidentiality, integrity, and availability via remote vectors as noted in the March 2010 CPU disclosu...

CVE-2010-0846

Technical details for CVE-2010-0846 are not provided in the connected documents. No concrete product/version/root-cause/impact/fix details are available here. Monitor for updates from authoritative sources.

CVE-2010-4473

CVE-2010-4473 is an unspecified vulnerability in Oracle Java SE/Java for Business prior to certain updates (6u23, 5.0u27, 1.4.2u29) that affects confidentiality, integrity and availability via unknown vectors related to Sound and unspecified APIs. It is distinguished from CVE-2010-4454 and CVE-20...

CVE-2008-5345

CVE-2008-5345 describes an unspecified vulnerability in Java Runtime Environment that affects Sun JDK/JRE up to certain old releases. The initial document lists affected products/versions: JRE/JDK 6 Update 10 and earlier; JDK/JRE 5.0 Update 16 and earlier; SDK/JRE 1.4.2_18 and earlier; and SDK/JR...

CVE-2008-1195

CVE-2008-1195 is described as an unspecified vulnerability in Sun JDK/JRE 6 Update 4 and earlier; 5.0 Update 14 and earlier; and SDK/JRE 1.4.2_16 and earlier, where remote attackers could use JavaScript/Java API vectors to access local network services. Red Hat advisories referencing this CVE (e....

CVE-2008-5355

CVE-2008-5355 affects Sun JDK/JRE where the Java Update mechanism fails to verify the signature of the downloaded JRE. A remote attacker could exploit this via DNS-based man-in-the-middle to execute arbitrary code on affected systems. Affected products include JRE/JDK/JRE updates for Sun JDK/JRE ...

CVE-2010-0087

Technical details for CVE-2010-0087 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2008-5344

The CVE-2008-5344 entry describes an unspecified vulnerability in Sun Java Web Start (JWS) and Java Plug-in affecting Sun JDK/JRE 6u10 and earlier, JDK/JRE 5.0u16 and earlier, and SDK/JRE 1.4.2_18 and earlier. The issue allows untrusted applets to read arbitrary files and make unauthorized networ...

CVE-2010-4475

CVE-2010-4475 concerns a vulnerability in Oracle Java SE/Java for Business where the Java Runtime Environment allows remote untrusted Java Web Start applications and untrusted applets to affect confidentiality via unknown vectors in Deployment. Affected products/versions: JRE 6u23 and earlier, 5....

CVE-2007-0243

CVE-2007-0243 is a memory-corruption vulnerability in Sun JDK/JRE GIF image handling. The issue arises when parsing a GIF block with a 0 width field, allowing an attacker to potentially execute arbitrary code or gain privileges within a browser-hosted Java applet context. Affected are Sun Java De...

CVE-2008-1187

CVE-2008-1187 affects Sun Java Runtime Environment (JRE) and JDK family prior to several updates (J2SE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier). The vulnerability is described as unspecified, allowing remote attackers to cause a denial of service (JRE c...

CVE-2010-0844

Technical details for CVE-2010-0844 are not publicly provided in the supplied documents. No concrete affected products, versions, or fixes are present here. Monitor for updates.

CVE-2006-6737

CVE-2006-6737 affects Sun JDK/JRE 5.0 Update 5 and earlier, J2SDK/JRE 1.4.2_10 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issue allows an untrusted applet to access data in other applets (cross-applet data access). Red Hat and SUSE/OpenVAS entries confirm IBM/Java updates mitigate...

CVE-2007-2788

CVE-2007-2788 describes an integer overflow in Sun JDK/JRE image parsers that can be triggered by crafted JPEG or BMP files, leading to remote arbitrary code execution or JVM crash via a buffer overflow. Affected are Sun JDK/JRE versions prior to 1.5.0_11-b03 (JDK) and prior to 1.6.x before 1.6.0...

CVE-2007-5273

CVE-2007-5273 affects Sun JRE/JDK across multiple versions (JDK/JRE 6 Update 2 and earlier; 5.0 Update 12 and earlier; 1.4.2_15 and earlier; 1.3.1_20 and earlier). Root cause described as a multi-pin DNS rebinding issue when using an HTTP proxy: the applet download relies on DNS on the proxy whil...

CVE-2010-0849

CVE-2010-0849 affects Oracle Java SE/Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. The described issue is a heap-based overflow in a JPEGImageDecoderImpl decoding routine (claimed) that could enable code execution via a crafted JPEG image, impacting confidentiality, integr...

CVE-2006-5201

CVE-2006-5201 affects Sun Solaris components (notably NSS, NSS-based libraries, Java JDK/JRE, JSSE, IPSec/IKE, and related Sun products). The root cause is when using an RSA key with exponent 3 that removes PKCS #1 padding prior to hash generation, enabling remote attackers to forge a PKCS #1 v1....

CVE-2010-0839

Technical details about CVE-2010-0839 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2007-5238

CVE-2007-5238 affects Sun JDK/JRE: Java Web Start in Sun JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, and SDK/JRE 1.4.2_15 and earlier. The vulnerability does not properly enforce access restrictions for untrusted applications, allowing a user‑assisted remote attacker to obt...

CVE-2007-5240

CVE-2007-5240: Visual truncation vulnerability in Sun JDK/JRE (Java Runtime Environment) affecting JRE/JDK 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, SDK/JRE 1.4.2_15 and earlier, and SDK/JRE 1.3.1_20 and earlier. An attacker could bypass the display of the untrusted-code warning ...

CVE-2008-1185

CVE-2008-1185 refers to an unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK across multiple legacy versions: JRE/JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier. The description states that remote attackers could gain privileges via a...

CVE-2006-0614

CVE-2006-0614 concerns Sun JDK/JRE: Applets can escape the sandbox via reflection APIs, allowing remote privilege escalation. Affected products include Sun JDK/JRE 5.0 Update 3 and earlier, SDK/JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08. The vulnerability enables a malicious Java apple...