Description
Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.8-1jpp.1.el5 | RHSA-2008:0790 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0790 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-ibm +1 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0638 |
Advisories 2
- RHSA-2008:0790 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0638 Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2008:1044 vendor-advisory
- APPLE-SA-2008-09-24 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- 32018 third-party-advisory
- RHSA-2008:1043 vendor-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- 31320 third-party-advisory
- SUSE-SA:2008:043 vendor-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717
- 33237 third-party-advisory
- ADV-2008-2056 vdb-entry
- 30147 vdb-entry
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- 31736 third-party-advisory
- 33236 third-party-advisory
- http://support.apple.com/kb/HT3178
- 1020461 vdb-entry
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014
- 31497 third-party-advisory
- sun-jre-font-bo(43656) vdb-entry
- 238666 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2008-300.htm
- SUSE-SA:2008:045 vendor-advisory
- RHSA-2008:0790 vendor-advisory
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- 31010 third-party-advisory