Description
Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases.
References
- APPLE-SA-2008-09-24 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- 30142 vdb-entry
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- 32018 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- ADV-2008-2056 vdb-entry
- 1020460 vdb-entry
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- sun-securestatic-weak-security(43665) vdb-entry
- http://support.apple.com/kb/HT3178
- 238966 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- 31010 third-party-advisory