Description
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.16-1jpp.2.el5 | RHSA-2008:0595 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.1.el5 | RHSA-2008:0594 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.16-1jpp.2.el4 | RHSA-2008:0595 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.2.el4 | RHSA-2008:0594 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-sun +1 | 1.5.0.16-1jpp.2.el4 | RHSA-2008:0636 |
Advisories 3
- RHSA-2008:0636 Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0594 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0595 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 238967 vendor-advisory
- sun-virtualmachine-unauth-access(43659) vdb-entry
- APPLE-SA-2008-09-24 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- 1020455 vdb-entry
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- 32018 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- 30141 vdb-entry
- ADV-2008-2056 vdb-entry
- 31055 third-party-advisory
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- http://support.apple.com/kb/HT3178
- RHSA-2008:0594 vendor-advisory
- 31497 third-party-advisory
- oval:org.mitre.oval:def:10219 vdb-entry signature
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- RHSA-2008:0595 vendor-advisory
- 31010 third-party-advisory