Sun Java Runtime Environment Font Parsing Remote Privilege Escalation Vulnerability

Sun Java Runtime Environment Font Parsing Remote Privilege Escalation Vulnerability

Solution:
Sun has released Sun Alert Advisory 103024 with fixes to address this issue. Please see the references for more information.

Sun JRE (Linux Production Release) 1.4.2_11

Sun j2re-1_4_2_15-linux-i586-rpm.bin
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Solaris Production Release) 1.4.2_13

Sun j2re-1_4_2_15-solaris-sparc.sh
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Linux Production Release) 1.4.2_13

Sun j2sdk-1_4_2_15-linux-i586-rpm.bin
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun SDK (Solaris Production Release) 1.4.2_13

Sun j2sdk-1_4_2_15-solaris-sparc.tar.Z
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Windows Production Release) 1.4.2_14

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Windows Production Release) 1.4.2_13

Sun j2sdk-1_4_2_15-windows-i586-p.exe
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Windows Production Release) 1.4.2_13

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Windows Production Release) 1.4.2_11

Sun j2sdk-1_4_2_15-windows-i586-p.exe
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Solaris Production Release) 1.4.2_12

Sun j2re-1_4_2_15-solaris-sparc.sh
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Solaris Production Release) 1.4.2_11

Sun j2sdk-1_4_2_15-solaris-sparc.tar.Z
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

BEA Systems JRockit 5.0

BEA Systems jrockit-jdk1.5.0_11-linux_ia32.tar.gz
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia32.tar.gz

BEA Systems jrockit-jdk1.5.0_11-linux_ia64.tar.gz
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/ jrockit-jdk1.5.0_11-linux_ia64.tar.gz

BEA Systems jrockit-jdk1.5.0_11-linux_x86_64.tar.gz
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/ jrockit-jdk1.5.0_11-linux_x86_64.tar.gz

BEA Systems jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/ jrockit-jdk1.5.0_11-solaris_sparcv9.tar.gz

BEA Systems jrockit-jdk1.5.0_11-windows_ia32.zip
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia32.zip

BEA Systems jrockit-jdk1.5.0_11-windows_ia64.zip
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/ jrockit-jdk1.5.0_11-windows_ia64.zip

BEA Systems jrockit-jdk1.5.0_11-windows_x86_64.zip
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/ jrockit-jdk1.5.0_11-windows_x86_64.zip

Sun JRE (Linux Production Release) 1.4.2_12

Sun j2re-1_4_2_15-linux-i586-rpm.bin
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Linux Production Release) 1.4.2_11

Sun j2sdk-1_4_2_15-linux-i586-rpm.bin
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun SDK (Windows Production Release) 1.4.2_12

Sun j2sdk-1_4_2_15-windows-i586-p.exe
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Solaris Production Release) 1.4.2 _06

Sun j2re-1_4_2_15-solaris-sparc.sh
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Windows Production Release) 1.4.2

Sun j2sdk-1_4_2_15-windows-i586-p.exe
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun SDK (Windows Production Release) 1.4.2 _05

Sun j2sdk-1_4_2_15-windows-i586-p.exe
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Solaris Production Release) 1.4.2 _05

Sun j2re-1_4_2_15-solaris-sparc.sh
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Linux Production Release) 1.4.2 _01

Sun j2re-1_4_2_15-linux-i586-rpm.bin
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Windows Production Release) 1.4.2

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Solaris Production Release) 1.4.2

Sun j2re-1_4_2_15-solaris-sparc.sh
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Windows Production Release) 1.4.2 _03

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Linux Production Release) 1.4.2 _02

Sun j2sdk-1_4_2_15-linux-i586-rpm.bin
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Windows Production Release) 1.4.2 _01

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Windows Production Release) 1.4.2 _02

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Windows Production Release) 1.4.2 _05

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Linux Production Release) 1.4.2 _03

Sun j2re-1_4_2_15-linux-i586-rpm.bin
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Windows Production Release) 1.4.2 _04

Sun j2sdk-1_4_2_15-windows-i586-p.exe
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun SDK (Solaris Production Release) 1.4.2 _03

Sun j2sdk-1_4_2_15-solaris-sparc.tar.Z
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Linux Production Release) 1.4.2 _04

Sun j2re-1_4_2_15-linux-i586-rpm.bin
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Windows Production Release) 1.4.2 _05

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Windows Production Release) 1.4.2 _06

Sun j2re-1_4_2_15-windows-i586-p.exe
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Linux Production Release) 1.4.2 _04

Sun j2sdk-1_4_2_15-linux-i586-rpm.bin
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Solaris Production Release) 1.4.2 _04

Sun j2re-1_4_2_15-solaris-sparc.sh
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Linux Production Release) 1.4.2 _10

Sun j2re-1_4_2_15-linux-i586-rpm.bin
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Linux Production Release) 1.4.2 _08

Sun j2sdk-1_4_2_15-linux-i586-rpm.bin
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun SDK (Solaris Production Release) 1.4.2 _05

Sun j2sdk-1_4_2_15-solaris-sparc.tar.Z
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JRE (Linux Production Release) 1.4.2 _02

Sun j2re-1_4_2_15-linux-i586-rpm.bin
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun JRE (Solaris Production Release) 1.4.2 _03

Sun j2re-1_4_2_15-solaris-sparc.sh
https://sdlc1a.sun.com/ECom/EComActionServlet;jsessionid=463D64D09B9A2 ABB5BB4F5F7931A921D#

Sun SDK (Linux Production Release) 1.4.2 _05

Sun j2sdk-1_4_2_15-linux-i586-rpm.bin
https://sdlc2d.sun.com/ECom/EComActionServlet;jsessionid=8A80849E676F2 3C79048581EE9DF1F92#

Sun JDK (Linux Production Release) 1.5 .0_05

Sun jdk-1_5_0_12-nb-5_5_1-linux-ml.bin
https://sdlc5b.sun.com/ECom/EComActionServlet;jsessionid=5D507414BA747 518D62BE5781B58FB74#

Sun JDK (Windows Production Release) 1.5 .0_04

Sun jdk-1_5_0_12-nb-5_5_1-win-ml.exe
https://sdlc4d.sun.com/ECom/EComActionServlet;jsessionid=C1BA0A1D62A91 5C144EBD0BDF40F9E7E#

Sun JDK (Linux Production Release) 1.5 .0_03

Sun jdk-1_5_0_12-nb-5_5_1-linux-ml.bin
https://sdlc5b.sun.com/ECom/EComActionServlet;jsessionid=5D507414BA747 518D62BE5781B58FB74#

Sun JDK (Solaris Production Release) 1.5 .0_03

Sun 118666-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-12-1

Sun 118667-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-12-1

Sun 118668-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-12-1

Sun 118669-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-12-1

Sun JRE (Linux Production Release) 1.5 _03

Sun jre-1_5_0_12-linux-i586-rpm.bin
https://sdlc3e.sun.com/ECom/EComActionServlet;jsessionid=E2DD376C02694 481F58172E416EE1DDE#

Sun JDK (Solaris Production Release) 1.5 .0_04

Sun 118666-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-12-1

Sun 118667-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-12-1

Sun 118668-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-12-1

Sun 118669-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-12-1

Sun JDK (Solaris Production Release) 1.5

Sun 118666-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-12-1

Sun 118667-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-12-1

Sun 118668-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-12-1

Sun 118669-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-12-1

Sun JRE (Windows Production Release) 1.5 _06

Sun jre-1_5_0_12-windows-i586-p-iftw.exe
https://sdlc3e.sun.com/ECom/EComActionServlet;jsessionid=E2DD376C02694 481F58172E416EE1DDE#

Sun JRE (Solaris Production Release) 1.5

Sun 118666-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-12-1

Sun 118667-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-12-1

Sun 118668-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-12-1

Sun 118669-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-12-1

Sun JRE (Linux Production Release) 1.5 _02

Sun jre-1_5_0_12-linux-i586-rpm.bin
https://sdlc3e.sun.com/ECom/EComActionServlet;jsessionid=E2DD376C02694 481F58172E416EE1DDE#

Sun JRE (Solaris Production Release) 1.5 _01

Sun 118666-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-12-1

Sun 118667-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-12-1

Sun 118668-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-12-1

Sun 118669-12
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-12-1

Sun JRE (Linux Production Release) 1.5 _01

Sun jre-1_5_0_12-linux-i586-rpm.bin
https://sdlc3e.sun.com/ECom/EComActionServlet;jsessionid=E2DD376C02694 481F58172E416EE1DDE#

Apple Mac OS X 10.4.10

Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg

Apple Mac OS X 10.4.11

Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg

Apple Mac OS X Server 10.4.11

Apple Java for Mac OS X 10.4, Release 6
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16540&cat= 1&platform=osx&method=sa/JavaForMacOSX10.4Release6.dmg