Description
Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The second issue."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.7-1jpp.4.el4 | RHSA-2007:0062 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.3-1jpp.3.el4 | RHSA-2007:0073 |
| RHEL 3 | java-1.4.2-ibm +5 | 1.4.2.7-1jpp.4.el3 | RHSA-2007:0062 |
| RHEL 2 | IBMJava2-JRE | 1:1.3.1-12 | RHSA-2007:0072 |
| RHEL 2 | IBMJava2-SDK | 1:1.3.1-11 | RHSA-2007:0072 |
Advisories 3
- RHSA-2007:0073 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0062 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0072 Red Hat Security Advisory: IBMJava2 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- http://docs.info.apple.com/article.html?artnum=307177
- 26049 third-party-advisory
- RHSA-2007:0062 vendor-advisory
- 24099 third-party-advisory
- 25404 third-party-advisory
- 1017427 vdb-entry
- 24189 third-party-advisory
- ADV-2006-5075 vdb-entry
- SUSE-SA:2007:045 vendor-advisory
- APPLE-SA-2007-12-14 vendor-advisory
- SUSE-SA:2007:003 vendor-advisory
- oval:org.mitre.oval:def:9729 vdb-entry signature
- http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
- SUSE-SA:2007:010 vendor-advisory
- 26119 third-party-advisory
- RHSA-2007:0072 vendor-advisory
- 21674 vdb-entry
- ADV-2007-4224 vdb-entry
- 23650 third-party-advisory
- 23835 third-party-advisory
- RHSA-2007:0073 vendor-advisory
- GLSA-200705-20 vendor-advisory
- 28115 third-party-advisory
- GLSA-200702-08 vendor-advisory
- 23398 third-party-advisory
- http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
- 102732 vendor-advisory
- GLSA-200701-15 vendor-advisory