Description
Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html ↗
- http://marc.info/?l=bugtraq&m=122331139823057&w=2 ↗
- http://www.securityfocus.com/bid/30142 ↗
- http://secunia.com/advisories/31600 ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html ↗
- http://secunia.com/advisories/32018 ↗
- http://security.gentoo.org/glsa/glsa-200911-02.xml ↗
- http://secunia.com/advisories/32179 ↗
- http://www.vupen.com/english/advisories/2008/2740 ↗
- http://www.vupen.com/english/advisories/2008/2056/references ↗
- http://www.securitytracker.com/id?1020460 ↗
- http://secunia.com/advisories/32180 ↗
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43665 ↗
- http://support.apple.com/kb/HT3178 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238966-1 ↗
- http://www.securityfocus.com/archive/1/497041/100/0/threaded ↗
- http://www.us-cert.gov/cas/techalerts/TA08-193A.html ↗
- http://secunia.com/advisories/37386 ↗
- http://support.apple.com/kb/HT3179 ↗
- http://secunia.com/advisories/31010 ↗