Description
Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.4.2-bea +5 | 1.4.2.16-1jpp.2.el5 | RHSA-2008:0243 |
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.11-1jpp.2.el5 | RHSA-2008:0555 |
| RHEL 5 | java-1.5.0-bea +5 | 1.5.0.14-1jpp.2.el5 | RHSA-2008:0244 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.7-1jpp.2.el5 | RHSA-2008:0210 |
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.15-1jpp.2.el5 | RHSA-2008:0186 |
| RHEL 5 | java-1.6.0-bea +5 | 1:1.6.0.03-1jpp.2.el5 | RHSA-2008:0245 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.1-1jpp.2.el5 | RHSA-2008:0267 |
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.11-1jpp.2.el4 | RHSA-2008:0555 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.7-1jpp.2.el4 | RHSA-2008:0210 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.15-1jpp.2.el4 | RHSA-2008:0186 |
| RHEL 3 | java-1.4.2-bea +2 | 1.4.2.16-1jpp.2.el3 | RHSA-2008:0243 |
| RHEL 3 | java-1.4.2-ibm +5 | 1.4.2.11-1jpp.2.el3 | RHSA-2008:0555 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-ibm +1 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0638 |
Advisories 8
- RHSA-2008:0638 Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0555 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0267 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0245 Red Hat Security Advisory: java-1.6.0-bea security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0244 Red Hat Security Advisory: java-1.5.0-bea security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0243 Red Hat Security Advisory: java-1.4.2-bea security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0210 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0186 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 29999 third-party-advisory
- APPLE-SA-2008-09-24 vendor-advisory
- 30676 third-party-advisory
- 29841 third-party-advisory
- RHSA-2008:0267 vendor-advisory
- SUSE-SA:2008:018 vendor-advisory
- RHSA-2008:0245 vendor-advisory
- RHSA-2008:0243 vendor-advisory
- 32018 third-party-advisory
- 31586 third-party-advisory
- java-virtualmachine-multiple-priv-escalation(41025) vdb-entry
- http://download.novell.com/Download?buildid=q5exhSqeBjA~
- JVNDB-2008-000016 third-party-advisory
- 29897 third-party-advisory
- 29498 third-party-advisory
- JVN#04032535 third-party-advisory
- BEA08-201.00 vendor-advisory
- GLSA-200804-28 vendor-advisory
- 29239 third-party-advisory
- 29858 third-party-advisory
- TA08-066A third-party-advisory
- SUSE-SA:2008:025 vendor-advisory
- http://support.apple.com/kb/HT3178
- 29582 third-party-advisory
- ADV-2008-1252 vdb-entry
- 1019548 vdb-entry
- ADV-2008-0770 vdb-entry
- 31497 third-party-advisory
- RHSA-2008:0210 vendor-advisory
- 31067 third-party-advisory
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html
- 30780 third-party-advisory
- RHSA-2008:0244 vendor-advisory
- ADV-2008-1856 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0010.html
- 30003 third-party-advisory
- 233322 vendor-advisory
- GLSA-200804-20 vendor-advisory
- GLSA-200806-11 vendor-advisory
- RHSA-2008:0186 vendor-advisory
- http://support.apple.com/kb/HT3179
- RHSA-2008:0555 vendor-advisory
- 31580 third-party-advisory
- oval:org.mitre.oval:def:10278 vdb-entry signature
- 29273 third-party-advisory