Inhalte überspringen »
Security aktuell
Mittwoch, 4. November 2009 - aktualisierte Meldung
Mehrere Schwachstellen erlauben u.a. die Ausführung beliebigen Codes
Systeme:
Multi, Unix / Sun Solaris, Linux, Windows
Programm:
Sun Java
Programmversion:
JDK/JRE < 6 Update 17, JDK/JRE < 5.0 Update 22, Java SE for Business SDK/JRE < 1.4.2_24, SDK/JRE < 1.3.1_27
Programmlink:
Lösung:
Die Schwachstellen wurden in JDK/JRE 6 Update 17, JDK/JRE 5.0 Update 22, Java SE for Business SDK/JRE 1.4.2_24 und SDK/JRE 1.3.1_27 behoben.
Die Schwachstellen wurden in JDK/JRE 6 Update 17, JDK/JRE 5.0 Update 22, Java SE for Business SDK/JRE 1.4.2_24 und SDK/JRE 1.3.1_27 behoben.
Quellen:
- The Java Update Mechanism on Non-English Versions Does Not Update the JRE When a New Version is Available
- Command Execution Vulnerability in the Java Runtime Environment Deployment Toolkit May be Leveraged to Execute Arbitrary Code
- Security Vulnerability in the Java Web Start Installer May be Leveraged to Allow Untrusted Java Web Start Application to Run As Trusted Application
- Buffer and Integer Overflow Vulnerabilities in the Java Runtime Environment With Processing Audio and Image Files May Allow Privileges to be Escalated
- A Security Vulnerability in the Java Runtime Environment With Verifying HMAC Digests may Allow Authentication to be Bypassed
- Two Security Vulnerabilities in the Java Runtime Environment With Decoding DER Encoded Data and Parsing HTTP Headers may Result in a Denial of Service (DoS)
- Nachtrag 5.11.: ZDI-09-076: Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability
- Nachtrag 5.11.: ZDI-09-077: Sun Java Web Start Arbitrary Command Execution Vulnerability
- Nachtrag 5.11.: ZDI-09-078: Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability
- Nachtrag 5.11.: ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability
- Nachtrag 5.11.: ZDI-09-080: Sun Java Runtime Environment JPEGImageReader Heap Overflow Vulnerability
Status:
Patch OK Erklärung
