Description
Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of service (application crash) via a certain test suite, aka Bug Id 6815780.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.17-1jpp.2.el5 | RHSA-2009:1560 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.17-1jpp.1.el4 | RHSA-2009:1560 |
Advisories 1
- RHSA-2009:1560 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- GLSA-200911-02 vendor-advisory
- http://java.sun.com/javase/6/webnotes/6u17.html
- oval:org.mitre.oval:def:7537 vdb-entry signature
- https://bugzilla.redhat.com/show_bug.cgi?id=532904
- http://java.sun.com/j2se/1.5.0/ReleaseNotes.html
- 37386 third-party-advisory