The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka "The first two issues."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.4.2.18Upgrade to Apple Java version 1.6.0.07Upgrade to Apple Java version 1.5.0.16 | Jan 26, 2012 | Mar 6, 2008 |
| Gentoo Linux | — | Upgrade dev-java/sun-jdk.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jre-bin. | Oct 30, 2017 | Mar 6, 2008 |
| Suse | — | Upgrade java-1_6_0-ibmUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibm-alsaUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibm-plugin | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade sun-java5Upgrade sun-java6 | Nov 19, 2024 | Mar 6, 2008 |
| Vmsa 2008 0010 | — | Apply ESX350-200806404-SG. | Nov 19, 2010 | Mar 6, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub