Description
The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.13-1jpp.1.el5 | RHSA-2007:0963 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.13-1jpp.1.el4 | RHSA-2007:0963 |
Advisories 1
- RHSA-2007:0963 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- http://support.avaya.com/elmodocs2/security/ASA-2007-480.htm
- ADV-2007-3895 vdb-entry
- 30676 third-party-advisory
- 29042 third-party-advisory
- 27693 third-party-advisory
- 1018847 vdb-entry
- 103112 vendor-advisory
- 27320 third-party-advisory
- GLSA-200804-28 vendor-advisory
- HPSBUX02284 vendor-advisory
- 29858 third-party-advisory
- ADV-2008-0609 vdb-entry
- BEA08-198.00 vendor-advisory
- 26185 vdb-entry
- 30780 third-party-advisory
- ADV-2008-1856 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0010.html
- 40834 vdb-entry
- oval:org.mitre.oval:def:9898 vdb-entry signature
- GLSA-200804-20 vendor-advisory
- ADV-2007-3589 vdb-entry
- GLSA-200806-11 vendor-advisory