Sun Java SE November 2009 Multiple Security Vulnerabilities

Sun Java SE November 2009 Multiple Security Vulnerabilities

References:

[NETRAGARD SECURITY ADVISORY] [< Java for Mac OS X 10.6 Update 1 ][NETRAGARD-200 (Netragard Advisories (advisoriesnetragard.com))
Attack exploits just-patched Mac security bug (Dan Goodin)
Java Homepage (Sun)
Security alerts (IBM)
VMSA-2010-0015 VMware ESX third party updates for Service Console (VMWare)
HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege, (security-alert@hp.com)
ZDI-09-076: Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability (ZDI Disclosures )
ZDI-09-077: Sun Java Web Start Arbitrary Command Execution Vulnerability (ZDI Disclosures )
ZDI-09-078: Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability (ZDI Disclosures )
ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability (ZDI Disclosures )
269868: The Java Update Mechanism on Non-English Versions Does Not Update the JR (Sun)
269869: Command Execution Vulnerability in the Java Runtime Environment Deployme (Sun)
269870: Security Vulnerability in the Java Web Start Installer (Sun)
270474: Buffer and Integer Overflow Vulnerabilities in the Java Runtime Environm (Sun)
270475: A Security Vulnerability in the Java Runtime Environment With Verifying (Sun)
270476: Two Security Vulnerabilities in the Java Runtime Environment With Decodi (Sun)
29 Oct 2009 Advance notification of Security Updates for Java SE (Sun)
ASA-2009-532 Buffer and Integer Overflow Vulnerabilities in the Java Runtime Env (Avaya)
ASA-2009-533 A Security Vulnerability in the Java Runtime Environment With Verif (Avaya)
ASA-2009-534 Two Security Vulnerabilities in the Java Runtime Environment With D (Avaya)
ASA-2009-545: java-1.6.0-openjdk security update (RHSA-2009-1584) (Avaya)
ASA-2010-118 gnutls security update (RHSA-2010-0166) (Avaya)
Java SE 6 Update Release Notes (Sun)
Oracle Critical Patch Update Advisory - January 2010 (Oracle)
Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability (Zero Day Initiative)
Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability (Zero Day Initiative)
Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability (Zero Day Initiative)
Sun Java Runtime Environment AWT ImageRep Heap Buffer Overflow Vulnerability (iDefense)
Sun Java Runtime Environment Color Management Buffer Overflow Vulnerability (iDefense)
Sun Java Runtime Environment Deployment Toolkit Command Execution Vulnerability (iDefense)
Sun Java Runtime Environment JPEGImageReader Heap Overflow Vulnerability (Zero Day Initiative)
Sun Java Web Start Arbitrary Command Execution Vulnerability (Zero Day Initiative)
ZDI-09-080: Sun Java Runtime Environment JPEGImageReader Heap Overflow Vulnerabi (ZDI Disclosures )