sun java runtime environment 5.0 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and previous versions, and 6 Update 12 and previous versions, allows remote malicious users to access files or execute arbitrary code via crafted glyph descriptions in a Typ...

Sun Java Runtime Environment 6.0 Sun Java Se Development Kit Sun Java Runtime Environment 5.0

6.4

CVSSv2

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and previous versions; 6 Update 12 and previous versions; 1.4.2_19 and previous versions; and 1.3.1_24 and previous versions allows remote malicious use...

Sun Java

4.3

CVSSv2

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and previous versions, and 5.0 Update 17 and previous versions, allows remote malicious users to trick a user into trusting a signed applet via unknown vectors that misrepresent the s...

Sun Java

5

CVSSv2

The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent mali...

Sun Jdk 6 Sun Jre 6 Sun Jre 5.0 Sun Jdk Sun Jre Sun Jdk 5.0

5

CVSSv2

The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote malicious users to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start applicati...

Sun Jdk 6 Sun Jre 6 Sun Jre 5.0 Sun Jdk 5.0 Sun Jdk Sun Jre

7.5

CVSSv2

The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote malicious users to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related t...

Sun Jdk 6 Sun Jre 6 Sun Jre 5.0 Sun Jdk 5.0 Sun Jdk Sun Jre

7.5

CVSSv2

The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote malicious...

Sun Jdk 6 Sun Jre 6 Sun Jre Sun Jre 5.0 Sun Jdk 5.0 Sun Jdk

10

CVSSv2

Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent malicious users to gain privileges via unspecified length fields in the header of a Pack200-compressed...

Sun Jdk 6 Sun Jre 6 Sun Jre 5.0 Sun Jdk 5.0 Sun Jdk Sun Jre

9.3

CVSSv2

Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and previous versions and JDK and JRE 5.0 Update 15 and previous versions, when local monitoring is enabled, allows remote malicious ...

Sun Jdk 5.0 Sun Jre 5.0 Sun Jre 6 Sun Jdk 6 Sun Jre Sun Jdk

5.8

CVSSv2

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and previous versions; 6 Update 12 and previous versions; and 1.4.2_19 and previous versions does not prevent Javascript that is loaded from the localhost from connecting to other p...

Sun Java

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook