Description
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.9.1-1jpp.1.el6 | RHSA-2011:0357 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.24-1jpp.1.el6 | RHSA-2011:0282 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.9.1-1jpp.1.el5 | RHSA-2011:0357 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.24-1jpp.1.el5 | RHSA-2011:0282 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.9.1-1jpp.1.el4 | RHSA-2011:0357 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.24-1jpp.1.el4 | RHSA-2011:0282 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.9.1-1jpp.1.el5 | RHSA-2011:0880 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Sun Java Applet2ClassLoader Remote Code Execution
exploit/windows/browser/java_codebase_trust
Exploit-DB 1
- Sun Java Applet2ClassLoader - Remote Code Execution (Metasploit) EDB-16990 · remote · Mar 16, 2011 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- RHSA-2011:0880 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0357 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0282 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
- 8145 third-party-advisory
- HPSBMU02799 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
- oval:org.mitre.oval:def:14230 vdb-entry signature
- 44954 third-party-advisory
- oval:org.mitre.oval:def:12927 vdb-entry signature
- RHSA-2011:0880 vendor-advisory
- RHSA-2011:0282 vendor-advisory
- SSRT100867 vendor-advisory