Description
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.4-1jpp.1.el5 | RHSA-2009:0369 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.11-1jpp.1.el5 | RHSA-2008:1018 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.4-1jpp.1.el4 | RHSA-2009:0369 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.11-1jpp.1.el4 | RHSA-2008:1018 |
Advisories 2
- RHSA-2009:0369 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:1018 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 244987 vendor-advisory
- SSRT090049 vendor-advisory
- SUSE-SA:2009:018 vendor-advisory
- 34259 third-party-advisory
- ADV-2009-0672 vdb-entry
- 34447 third-party-advisory
- RHSA-2008:1018 vendor-advisory
- 33015 third-party-advisory
- 34233 third-party-advisory
- GLSA-200911-02 vendor-advisory
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
- RHSA-2009:0369 vendor-advisory
- SSRT080111 vendor-advisory
- 38539 third-party-advisory
- jre-gif-images-privilege-escalation(47049) vdb-entry
- SUSE-SR:2009:006 vendor-advisory
- ADV-2008-3339 vdb-entry
- 20081204 Sun Java Web Start GIF Decoding Memory Corruption Vulnerability third-party-advisory
- TA08-340A third-party-advisory
- 33709 third-party-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
- 34605 third-party-advisory
- oval:org.mitre.oval:def:6319 vdb-entry signature
- 33187 third-party-advisory
- 32991 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm
- 32608 vdb-entry
- 37386 third-party-advisory
- 50515 vdb-entry