The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demo | Dec 1, 2016 | Aug 10, 2009 |
| Gentoo Linux | — | Upgrade dev-java/blackdown-jre.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/sun-jdk.Upgrade dev-java/blackdown-jdk.Upgrade app-emulation/emul-linux-x86-java. | Oct 30, 2017 | Aug 10, 2009 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk | Oct 16, 2024 | Aug 10, 2009 |
| Suse | — | Upgrade java-1_6_0-openjdk-develUpgrade java-1_6_0-openjdk-pluginUpgrade java-1_6_0-sun-alsaUpgrade java-1_5_0-sun-demoUpgrade java-1_6_0-sun-develUpgrade java-1_6_0-sun-jdbcUpgrade java-1_6_0-openjdk-javadocUpgrade java-1_5_0-sun-alsaUpgrade java-1_5_0-sunUpgrade java-1_6_0-sun-demoUpgrade java-1_6_0-sun-srcUpgrade java-1_6_0-sun-pluginUpgrade java-1_5_0-sun-develUpgrade java-1_6_0-sunUpgrade java-1_6_0-openjdkUpgrade java-1_6_0-openjdk-demoUpgrade java-1_5_0-sun-pluginUpgrade java-1_5_0-sun-jdbcUpgrade java-1_6_0-openjdk-srcUpgrade java-1_5_0-sun-src | Feb 17, 2015 | Aug 10, 2009 |
| Ubuntu | — | Upgrade openjdk-6-jre-libUpgrade openjdk-6-jreUpgrade icedtea6-plugin | Nov 8, 2024 | Aug 10, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub