The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and previous versions; JDK and JRE 5.0 Update 16 and previous versions; and SDK and JRE 1.4.2_18 and previous versions does not verify the signature of the JRE that is downloaded, which allows remote malicious users to execute arbitrary code via DNS man-in-the-middle attacks.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sun jdk 6 |
||
sun jre 6 |
||
sun jre 5.0 |
||
sun jdk 5.0 |
||
sun jdk |
||
sun jre 1.4.2_15 |
||
sun sdk 1.4.2_15 |
||
sun jre 1.4.2_11 |
||
sun sdk 1.4.2_11 |
||
sun sdk 1.4.2_7 |
||
sun jre 1.4.2_6 |
||
sun sdk 1.4.2_3 |
||
sun jre 1.4.2_2 |
||
sun jre |
||
sun jre 1.4.2_17 |
||
sun sdk 1.4.2_17 |
||
sun jre 1.4.2_13 |
||
sun sdk 1.4.2_13 |
||
sun jre 1.4.2_9 |
||
sun sdk 1.4.2_9 |
||
sun jre 1.4.2_8 |
||
sun sdk 1.4.2_5 |
||
sun jre 1.4.2_4 |
||
sun sdk 1.4.2_1 |
||
sun sdk |
||
sun jre 1.4.2_14 |
||
sun sdk 1.4.2_14 |
||
sun jre 1.4.2_10 |
||
sun sdk 1.4.2_10 |
||
sun sdk 1.4.2_6 |
||
sun jre 1.4.2_5 |
||
sun sdk 1.4.2_2 |
||
sun jre 1.4.2_1 |
||
sun jre 1.4.2_16 |
||
sun sdk 1.4.2_16 |
||
sun jre 1.4.2_12 |
||
sun sdk 1.4.2_12 |
||
sun sdk 1.4.2_8 |
||
sun jre 1.4.2_7 |
||
sun sdk 1.4.2_4 |
||
sun jre 1.4.2_3 |
Vulmon