Description
Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service (applet crash) via a crafted Pulse Audio source data line.
References
- MDVSA-2009:137 vendor-advisory
- 34623 third-party-advisory
- pulsejava--pulseaudiotargetdatal-dos(50383) vdb-entry
- ADV-2009-0965 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=492367
- FEDORA-2009-3426 vendor-advisory
- MDVSA-2009:162 vendor-advisory
- [distro-pkg-dev] 20090211 changeset in /hg/icedtea6: 2009-02-11 Omair Majid <omajid at redh... mailing-list
- FEDORA-2009-3425 vendor-advisory