Description
Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.8-1jpp.1.el5 | RHSA-2008:0790 |
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.16-1jpp.2.el5 | RHSA-2008:0595 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0790 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.16-1jpp.2.el4 | RHSA-2008:0595 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-ibm +1 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0638 |
| Red Hat Network Satellite 5 | java-1.5.0-sun +1 | 1.5.0.16-1jpp.2.el4 | RHSA-2008:0636 |
Advisories 4
- RHSA-2008:0790 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0636 Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0638 Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0595 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- APPLE-SA-2008-09-24 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- 32018 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- 31320 third-party-advisory
- SUSE-SA:2008:043 vendor-advisory
- sun-javawebstart-unspecified-bo(43664) vdb-entry
- ADV-2008-2056 vdb-entry
- 238905 vendor-advisory
- 31055 third-party-advisory
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- 31736 third-party-advisory
- oval:org.mitre.oval:def:10541 vdb-entry signature
- http://support.apple.com/kb/HT3178
- 1020452 vdb-entry
- 30148 vdb-entry
- 31497 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-043/
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- 20080717 ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow mailing-list
- SUSE-SA:2008:045 vendor-advisory
- RHSA-2008:0790 vendor-advisory
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- RHSA-2008:0595 vendor-advisory
- 31010 third-party-advisory