Description
Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.7-1jpp.4.el4 | RHSA-2007:0062 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.3-1jpp.3.el4 | RHSA-2007:0073 |
| RHEL 3 | java-1.4.2-ibm +5 | 1.4.2.7-1jpp.4.el3 | RHSA-2007:0062 |
| RHEL 2 | IBMJava2-JRE | 1:1.3.1-12 | RHSA-2007:0072 |
| RHEL 2 | IBMJava2-SDK | 1:1.3.1-11 | RHSA-2007:0072 |
Advisories 3
- RHSA-2007:0073 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0062 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0072 Red Hat Security Advisory: IBMJava2 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 21675 vdb-entry
- http://docs.info.apple.com/article.html?artnum=307177
- ADV-2006-5073 vdb-entry
- 24468 third-party-advisory
- HPSBUX02196 vendor-advisory
- 102729 vendor-advisory
- RHSA-2007:0062 vendor-advisory
- ADV-2007-1814 vdb-entry
- http://scary.beasts.org/security/CESA-2005-008.txt
- 25283 third-party-advisory
- 24099 third-party-advisory
- 25404 third-party-advisory
- oval:org.mitre.oval:def:10134 vdb-entry signature
- 24189 third-party-advisory
- APPLE-SA-2007-12-14 vendor-advisory
- SUSE-SA:2007:003 vendor-advisory
- VU#939609 third-party-advisory
- SUSE-SA:2007:010 vendor-advisory
- RHSA-2007:0072 vendor-advisory
- 23445 third-party-advisory
- ADV-2007-4224 vdb-entry
- 23650 third-party-advisory
- 23835 third-party-advisory
- 1017425 vdb-entry
- RHSA-2007:0073 vendor-advisory
- VU#149457 third-party-advisory
- GLSA-200705-20 vendor-advisory
- 28115 third-party-advisory
- ADV-2007-0936 vdb-entry
- GLSA-200702-08 vendor-advisory
- TA07-022A third-party-advisory
- GLSA-200701-15 vendor-advisory
- BEA07-174.00 vendor-advisory