Description
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.7-1jpp.4.el4 | RHSA-2007:0062 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.3-1jpp.3.el4 | RHSA-2007:0073 |
| RHEL 3 | java-1.4.2-ibm +5 | 1.4.2.7-1jpp.4.el3 | RHSA-2007:0062 |
Advisories 2
- RHSA-2007:0073 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0062 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 21673 vdb-entry
- http://docs.info.apple.com/article.html?artnum=307177
- 24468 third-party-advisory
- HPSBUX02196 vendor-advisory
- 26049 third-party-advisory
- RHSA-2007:0062 vendor-advisory
- ADV-2007-1814 vdb-entry
- 25283 third-party-advisory
- oval:org.mitre.oval:def:9621 vdb-entry signature
- 24099 third-party-advisory
- 25404 third-party-advisory
- 24189 third-party-advisory
- SUSE-SA:2007:045 vendor-advisory
- APPLE-SA-2007-12-14 vendor-advisory
- SUSE-SA:2007:003 vendor-advisory
- http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
- SUSE-SA:2007:010 vendor-advisory
- 26119 third-party-advisory
- 23445 third-party-advisory
- ADV-2007-4224 vdb-entry
- 23650 third-party-advisory
- 23835 third-party-advisory
- 1017426 vdb-entry
- RHSA-2007:0073 vendor-advisory
- VU#102289 third-party-advisory
- GLSA-200705-20 vendor-advisory
- 28115 third-party-advisory
- 102731 vendor-advisory
- BEA07-171.00 vendor-advisory
- ADV-2006-5074 vdb-entry
- ADV-2007-0936 vdb-entry
- GLSA-200702-08 vendor-advisory
- http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
- TA07-022A third-party-advisory
- GLSA-200701-15 vendor-advisory