Skip to content
OpenAdvisories
Unscored RHSA-2007:0956 6 CVEs

Red Hat Security Advisory: java-1.5.0-bea security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-bea 0:1.5.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-bea-demo 0:1.5.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-bea-devel 0:1.5.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-bea-jdbc 0:1.5.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-bea-missioncontrol 0:1.5.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-bea-src 0:1.5.0.11-1jpp.1.el5

Vulnerabilities 6

  • Unscored —
    CVE-2007-0243 Public exploit EPSS 12%

    Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlie…

  • Unscored —
    CVE-2007-2788 Public exploit EPSS 18%

    Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6…

  • Unscored —
    CVE-2007-2789

    The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java …

  • Unscored —
    CVE-2007-3503

    The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scrip…

  • Unscored —
    CVE-2007-3698

    The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11…

  • Unscored —
    CVE-2007-4381 Public exploit

    Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and J…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=242595
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=246765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=249539
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250729
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250733
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=253488
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=325941
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0956.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-0243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0243
  • report
    https://access.redhat.com/security/cve/CVE-2007-2788
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2788
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2788
  • report
    https://access.redhat.com/security/cve/CVE-2007-2789
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2789
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2789
  • report
    https://access.redhat.com/security/cve/CVE-2007-3503
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3503
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3503
  • report
    https://access.redhat.com/security/cve/CVE-2007-3698
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3698
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3698
  • report
    https://access.redhat.com/security/cve/CVE-2007-4381
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4381
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4381