Description
Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-0.30.b09.el5 | RHSA-2009:0377 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.13-1jpp.1.el5 | RHSA-2009:0392 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.13-1jpp.1.el4 | RHSA-2009:0392 |
Advisories 2
- RHSA-2009:0392 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:0377 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- oval:org.mitre.oval:def:6722 vdb-entry signature
- MDVSA-2009:137 vendor-advisory
- 34632 third-party-advisory
- SSRT090058 vendor-advisory
- SUSE-SA:2009:029 vendor-advisory
- 37460 third-party-advisory
- 34489 third-party-advisory
- GLSA-200911-02 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- HPSBUX02429 vendor-advisory
- 254610 vendor-advisory
- RHSA-2009:0377 vendor-advisory
- 35255 third-party-advisory
- ADV-2009-1426 vdb-entry
- 1021919 vdb-entry
- MDVSA-2009:162 vendor-advisory
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- RHSA-2009:0392 vendor-advisory
- oval:org.mitre.oval:def:10300 vdb-entry signature
- 35223 third-party-advisory
- 34240 vdb-entry
- 34496 third-party-advisory
- USN-748-1 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm
- 37386 third-party-advisory
- SUSE-SA:2009:016 vendor-advisory
- ADV-2009-3316 vdb-entry