Skip to content
OpenAdvisories
Unscored RHSA-2007:0829 7 CVEs

Red Hat Security Advisory: java-1.5.0-ibm security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm 1:1.5.0.5-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-demo 1:1.5.0.5-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-devel 1:1.5.0.5-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-javacomm 1:1.5.0.5-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-jdbc 1:1.5.0.5-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-plugin 1:1.5.0.5-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-src 1:1.5.0.5-1jpp.2.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-demo 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-devel 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-javacomm 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-jdbc 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-plugin 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-src 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-demo 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-devel 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-javacomm 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-jdbc 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-plugin 1:1.5.0.5-1jpp.0.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-src 1:1.5.0.5-1jpp.0.1.el5

Vulnerabilities 7

  • Unscored —
    CVE-2007-2435

    Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, al…

  • Unscored —
    CVE-2007-2788 Public exploit EPSS 18%

    Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6…

  • Unscored —
    CVE-2007-2789

    The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java …

  • Unscored —
    CVE-2007-3503

    The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scrip…

  • Unscored —
    CVE-2007-3655 Public exploit EPSS 12%

    Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and …

  • Unscored —
    CVE-2007-3922

    Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 an…

  • Unscored —
    CVE-2007-4381 Public exploit

    Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and J…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=239660
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=242595
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=246765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=248864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=249533
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250729
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250733
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0829.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-2435
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2435
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2435
  • report
    https://access.redhat.com/security/cve/CVE-2007-2788
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2788
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2788
  • report
    https://access.redhat.com/security/cve/CVE-2007-2789
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2789
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2789
  • report
    https://access.redhat.com/security/cve/CVE-2007-3503
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3503
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3503
  • report
    https://access.redhat.com/security/cve/CVE-2007-3655
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3655
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3655
  • report
    https://access.redhat.com/security/cve/CVE-2007-3922
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3922
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3922
  • report
    https://access.redhat.com/security/cve/CVE-2007-4381
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=253488
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4381
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4381