• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

References:

• [Security-announce] VMSA-2009-0014 VMware ESX patches for DHCP, Service Console (VMware)
  
• Critical: java-1.6.0-ibm security update (Red Hat)
  
• Java Homepage (Sun)
  
• nice reliable xp sp2/sp3 unpack200 jre update 11/12 exploit (0day.service)
  
• Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulner (iDefense Labs)
  
• Sun Java Runtine Environment (JRE) GIF Decoding Heap Corruption Vulnerability (iDefense Labs)
  
• Sun Java Runtine Environment (JRE) Type1 Font Parsing Integer Signedness Vulnera (iDefense Labs)
  
• Sun Java Web Start (JWS ) PNG Decoding Integer Overflow Vulnerability (iDefense Labs)
  
• Sun Java Web Start (JWS) GIF Decoding Heap Corruption Vulnerability (iDefense Labs)
  
• [security bulletin] HPSBMA02445 SSRT090058 rev.1 - HP Serviceguard Manager, Remo (security-alert@hp.com)
  
• HPSBUX02429 SSRT090058 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary (security-alert@hp.com)
  
• HPSBUX02429 SSRT090058 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary (security-alert@hp.com)
  
• VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release addre (VMware Security Team )
  
• VMSA-2009-0016 VMware vCenter and ESX update release and VMA patch release addre (VMware Security Team )
  
• #254569: Security Vulnerabilities in the Java Runtime Environment (JRE) LDAP Imp (Sun)
  
• #254570: Integer and Buffer Overflow Vulnerabilities in the Java Runtime Environ (Sun)
  
• #254571: Buffer Overflow Vulnerabilities in the Java Runtime Environment (JRE) w (Sun)
  
• #254608: Security Vulnerabilities in the Java Runtime Environment (JRE) With Sto (Sun)
  
• #254609: A Security Vulnerability in the Java Runtime Environment (JRE) HTTP Ser (Sun)
  
• #254610: A Security Vulnerability in the Java Runtime Environment (JRE) Virtual (Sun)
  
• #254611: Multiple Security Vulnerabilities in Java Plug-in May Allow Privileges (Sun)
  
• ASA-2009-121 Buffer Overflow Vulnerabilities in the Java Runtime Environment (JR (Avaya)
  
• ASA-2009-122 Security Vulnerabilities in the Java Runtime Environment (JRE) With (Avaya)
  
• ASA-2009-124 Integer and Buffer Overflow Vulnerabilities in the Java Runtime Env (Avaya)
  
• ASA-2009-125 Multiple Security Vulnerabilities in Java Plug-in (Avaya)
  
• ASA-2009-229 HPSBUX02429 SSRT090058 rev.1 - HP-UX Running Java, Remote Execution (Avaya)
  
• Critical: java-1.5.0-ibm security update (Red Hat)
  
• Nortel Response to Multiple Sun Java SE Vulnerabilities (Nortel Networks)
  
• Oracle Critical Patch Update Advisory - July 2009 (Oracle)