Title: Sun Java SE November 2009 Multiple Security Vulnerabilities

Severity: CRITICAL

Description:

Sun has released updates to address multiple security vulnerabilities in Java SE:

1. A weakness affects the Java Update Mechanism on non-English versions of Microsoft Windows. The weakness may prevent updates to Java Runtime Environment (JRE) when a new version is available. This introduces a false sense of security and may allow attackers to exploit other issues. (SUN Alert ID 269868, CVE-2009-3864)

2. An unspecified command-execution vulnerability in the 'launch' command of the JRE Deployment Toolkit can be exploited when a user visits a specially crafted site. (SUN Alert ID 269869)

3. A security vulnerability may allow attackers to run an untrusted Java Web Start application as a trusted application. The problem occurs in the implementation of the security model permissions during the removal of installer extensions. This will allow arbitrary code to run when a user visits a specially crafted site. (SUN Alert ID 269870)

4. Multiple buffer-overflow and integer-overflow vulnerabilities occur when processing audio and image files. These issues may allow an untrusted applet to run arbitrary code with elevated privileges. (SUN Alert ID 270474)

These issues include:

- A stack-based buffer overflow occurs when processing long 'file://' URL arguments in the 'HsbParser.getSoundBank()' function. (CVE-2009-3867)

- A stack-based buffer overflow occurs in the 'setDiffICM' AWT library function when processing arguments. (CVE-2009-3869)

- A heap-based overflow occurs in the 'setBytePixels' AWT library function when processing arguments. (CVE-2009-3871)

- An integer overflow occurs when processing JPEG image dimensions.

5. An unspecified security vulnerability that is related to verifying HMAC digests may allow attackers to forge a digital signature that would be accepted as valid. The issue potentially affects applications that validate HMAC-based digital signatures. (SUN Alert ID 270475)

6. Two denial-of-service vulnerabilities affect JRE running on servers and can be used to cause high memory consumption and denial-of-service conditions. These issues are related to decoding DER-encoded data and parsing HTTP headers. (SUN Alert ID 270476) (CVE-2009-3877)

The full list of bug fixes is as follows:

1. 'ICC_Profile' allows detecting if files exist (CVE-2009-3728)
2. A denial of service in TrueType font parsing when testing Sun Bug 6751322 (CVE_2009-3729)
3. A problem where X11 and Win32GraphicsDevice don't clone arrays returned from 'getConfigurations()' (CVE-2009-3879)
4. An issue in the JPEG JFIF Decoder (CVE-2009-3872)
5. A parsing issue in Image Color Profile (CVE-2009-3868)
6. A stack overflow in JRE AWT 'setDifflCM' (CVE-2009-3869)
7. A heap overflow in JRE AWT 'setBytePixels' (CVE-2009-3871)
8. 'Component' and '[Default]KeyboardFocusManager' pass security-sensitive objects to loggers (CVE-2009-3880)
9. An issue that allows Resurrected ClassLoaders to have children (CVE-2009-3881)
10. MD2 is not properly disabled in certificate chain validation (CVE-2009-2409)
11. 'MessageDigest.isEqual' contains timing attack vulnerabilities (CVE-2009-3875)
12. An issue in the ASN.1/DER input stream parser (CVE-2009-3877)
13. A stack buffer-overflow in Sun Java 'HsbParser.getSoundBank' (CVE-2009-3867)
14. Multiple static security issues in Swing (CVE-2009-3882, CVE-2009-3883)
15. Windows PL&F contains mutable statics
16. 'TimeZone.getTimeZone' can allow probing of the local filesystem (CVE-2009-3884)
17. A denial of service when parsing BMPs with UNC ICC links (CVE-2009-3885)
18. A quantization problem in the JPEG Image Writer (CVE-2009-3873)
19. A heap overflow in ImageI/O JPEG (CVE-2009--3874)
20. A malfunction in Java Update (CVE-2009-3864)
21. The Deployment Toolkit plugin 'launch' method is vulnerable to unspecified exploits (CVE-2009-3865)
22. Arbitary code execution in Java Web Start (CVE-2009-3866)
23. A regression problem when running JNLP app and applets with signed Jar files (CVE-2009-3886)

Successful exploits may allow attackers to bypass certain security restrictions, run untrusted applets with elevated privileges, execute arbitrary code, and cause denial-of-service conditions. Other attacks are also possible.

These issues are addressed in the following releases:

JDK and JRE 6 Update 17
JDK and JRE 5.0 Update 22
SDK and JRE 1.4.2_24
SDK and JRE 1.3.1_27

Affected Products:

Apache Software Foundation Xalan-java 2.5.1
Gentoo Linux
Macromedia ColdFusion Server MX Developer
Macromedia ColdFusion Server MX Enterprise
Macromedia ColdFusion Server MX Professional
Opera Software Opera Web Browser 7.11.0
Opera Software Opera Web Browser 7.11.0 j
Opera Software Opera Web Browser 7.54.0
RedHat Desktop Extras 4
RedHat Enterprise Linux 5 server
RedHat Enterprise Linux AS Extras 4
RedHat Enterprise Linux Desktop 5 client
RedHat Enterprise Linux Desktop Supplementary 5 client
RedHat Enterprise Linux ES Extras 4
RedHat Enterprise Linux Extras 4
RedHat Enterprise Linux Supplementary 5 server
RedHat Enterprise Linux WS Extras 4
RedHat Fedora 10
RedHat Fedora 11
RedHat Fedora 12
S.u.S.E. SLED 11
S.u.S.E. SLES 11 DEBUGINFO
S.u.S.E. openSUSE 11.0
S.u.S.E. openSUSE 11.1
S.u.S.E. openSUSE 11.2
Sun JDK (Linux Production Release) 1.1.8 _009
Sun JDK (Linux Production Release) 1.2.2 _005
Sun JDK (Linux Production Release) 1.2.2 _006
Sun JDK (Linux Production Release) 1.31_20
Sun JDK (Linux Production Release) 1.4.2 _08
Sun JDK (Linux Production Release) 1.4.2 _09
Sun JDK (Linux Production Release) 1.4.2_05
Sun JDK (Linux Production Release) 1.5.0
Sun JDK (Linux Production Release) 1.5.0 .0_03
Sun JDK (Linux Production Release) 1.5.0 .0_04
Sun JDK (Linux Production Release) 1.5.0 .0_05
Sun JDK (Linux Production Release) 1.5.0 .0_06
Sun JDK (Linux Production Release) 1.5.0 0_10
Sun JDK (Linux Production Release) 1.5.0 _07
Sun JDK (Linux Production Release) 1.5.0.0_08
Sun JDK (Linux Production Release) 1.5.0.0_09
Sun JDK (Linux Production Release) 1.5.0.0_11
Sun JDK (Linux Production Release) 1.5.0.0_12
Sun JDK (Linux Production Release) 1.5.0_12
Sun JDK (Linux Production Release) 1.5.0_13
Sun JDK (Linux Production Release) 1.5.0_16
Sun JDK (Linux Production Release) 1.5.0_20
Sun JDK (Linux Production Release) 1.6.0_01
Sun JDK (Linux Production Release) 1.6.0_01
Sun JDK (Linux Production Release) 1.6.0_02
Sun JDK (Linux Production Release) 1.6.0_03
Sun JDK (Linux Production Release) 1.6.0_15
Sun JDK (Solaris Production Release) 1.1.6
Sun JDK (Solaris Production Release) 1.1.7 B
Sun JDK (Solaris Production Release) 1.1.8
Sun JDK (Solaris Production Release) 1.1.8 _009
Sun JDK (Solaris Production Release) 1.1.8 _10
Sun JDK (Solaris Production Release) 1.1.8 _11
Sun JDK (Solaris Production Release) 1.1.8 _12
Sun JDK (Solaris Production Release) 1.1.8 _13
Sun JDK (Solaris Production Release) 1.1.8 _14
Sun JDK (Solaris Production Release) 1.1.8 _15
Sun JDK (Solaris Production Release) 1.2.1
Sun JDK (Solaris Production Release) 1.2.2 _05
Sun JDK (Solaris Production Release) 1.2.2 _06
Sun JDK (Solaris Production Release) 1.4.2 _08
Sun JDK (Solaris Production Release) 1.4.2 _09
Sun JDK (Solaris Production Release) 1.4.2_05
Sun JDK (Solaris Production Release) 1.5.0 .0_03
Sun JDK (Solaris Production Release) 1.5.0 .0_04
Sun JDK (Solaris Production Release) 1.5.0 .0_05
Sun JDK (Solaris Production Release) 1.5.0 .0_06
Sun JDK (Solaris Production Release) 1.5.0 0_03
Sun JDK (Solaris Production Release) 1.5.0 0_09
Sun JDK (Solaris Production Release) 1.5.0 0_09
Sun JDK (Solaris Production Release) 1.5.0 0_10
Sun JDK (Solaris Production Release) 1.5.0_11
Sun JDK (Solaris Production Release) 1.5.0_12
Sun JDK (Solaris Production Release) 1.5.0_13
Sun JDK (Solaris Production Release) 1.5.0_16
Sun JDK (Solaris Production Release) 1.5.0_20
Sun JDK (Solaris Production Release) 1.6.0_01
Sun JDK (Solaris Production Release) 1.6.0_02
Sun JDK (Solaris Production Release) 1.6.0_03
Sun JDK (Solaris Production Release) 1.6.0_15
Sun JDK (Windows Producation Release) 1.5.0.0_12
Sun JDK (Windows Production Release) 1.1.6 _007
Sun JDK (Windows Production Release) 1.1.6 _009
Sun JDK (Windows Production Release) 1.1.7 B_005
Sun JDK (Windows Production Release) 1.1.7 B_007
Sun JDK (Windows Production Release) 1.1.8 _002
Sun JDK (Windows Production Release) 1.1.8 _005
Sun JDK (Windows Production Release) 1.1.8 _007
Sun JDK (Windows Production Release) 1.1.8 _007
Sun JDK (Windows Production Release) 1.1.8 _008
Sun JDK (Windows Production Release) 1.1.8 _009
Sun JDK (Windows Production Release) 1.2.1 _003
Sun JDK (Windows Production Release) 1.2.1 _004
Sun JDK (Windows Production Release) 1.2.2 _004
Sun JDK (Windows Production Release) 1.2.2 _006
Sun JDK (Windows Production Release) 1.3.1_20
Sun JDK (Windows Production Release) 1.4.2 _02
Sun JDK (Windows Production Release) 1.4.2 _08
Sun JDK (Windows Production Release) 1.4.2 _09
Sun JDK (Windows Production Release) 1.4.2_05
Sun JDK (Windows Production Release) 1.4.2_10
Sun JDK (Windows Production Release) 1.4.2_11
Sun JDK (Windows Production Release) 1.5.0 .0_03
Sun JDK (Windows Production Release) 1.5.0 .0_04
Sun JDK (Windows Production Release) 1.5.0 .0_05
Sun JDK (Windows Production Release) 1.5.0 .0_06
Sun JDK (Windows Production Release) 1.5.0 0_10
Sun JDK (Windows Production Release) 1.5.0.0_08
Sun JDK (Windows Production Release) 1.5.0.0_09
Sun JDK (Windows Production Release) 1.5.0.0_11
Sun JDK (Windows Production Release) 1.5.0_07-b03
Sun JDK (Windows Production Release) 1.5.0_11-b03
Sun JDK (Windows Production Release) 1.5.0_12
Sun JDK (Windows Production Release) 1.5.0_13
Sun JDK (Windows Production Release) 1.5.0_16
Sun JDK (Windows Production Release) 1.5.0_20
Sun JDK (Windows Production Release) 1.6.0_01
Sun JDK (Windows Production Release) 1.6.0_01-b06
Sun JDK (Windows Production Release) 1.6.0_02
Sun JDK (Windows Production Release) 1.6.0_03
Sun JDK (Windows Production Release) 1.6.0_15
Sun JDK 1.1.0
Sun JDK 1.2.0
Sun JDK 1.3.1 _01
Sun JDK 1.3.1 _14
Sun JDK 1.3.1 _14
Sun JDK 1.3.1 _17
Sun JDK 1.3.1 _18
Sun JDK 1.4.1
Sun JDK 1.4.1 _01
Sun JDK 1.4.1 _07
Sun JDK 1.4.2
Sun JDK 1.4.2 _06
Sun JDK 1.4.2 _08
Sun JDK 1.4.2 _09
Sun JDK 1.4.2 _10
Sun JDK 1.4.2 _11
Sun JDK 1.4.2.14
Sun JDK 1.5.0
Sun JDK 1.5.0 .0_05
Sun JDK 1.5.0.11
Sun JDK 1.5.0_07-b03
Sun JDK 1.5.0_11-b03
Sun JDK 1.5.0_12
Sun JDK 1.6.0_01-b06
Sun JDK 5.0 Update 1
Sun JDK 5.0 Update 10
Sun JDK 5.0 Update 11
Sun JDK 5.0 Update 12
Sun JDK 5.0 Update 13
Sun JDK 5.0 Update 14
Sun JDK 5.0 Update 15
Sun JDK 5.0 Update 15
Sun JDK 5.0 Update 16
Sun JDK 5.0 Update 16
Sun JDK 5.0 Update 17
Sun JDK 5.0 Update 18
Sun JDK 5.0 Update 2
Sun JDK 5.0 Update 20
Sun JDK 5.0 Update 3
Sun JDK 5.0 Update 4
Sun JDK 5.0 Update 5
Sun JDK 5.0 Update 6
Sun JDK 5.0 Update 7
Sun JDK 5.0 Update 8
Sun JDK 5.0 Update 9
Sun JDK 6 Update 15
Sun JDK 6.0
Sun JDK 6.0 Update 1
Sun JDK 6.0 Update 10
Sun JDK 6.0 Update 11
Sun JDK 6.0 Update 13
Sun JDK 6.0 Update 14
Sun JDK 6.0 Update 2
Sun JDK 6.0 Update 3
Sun JDK 6.0 Update 4
Sun JDK 6.0 Update 5
Sun JDK 6.0 Update 6
Sun JDK 6.0 Update 7
Sun JRE (Linux Production Release) 1.2.2
Sun JRE (Linux Production Release) 1.2.2 _003
Sun JRE (Linux Production Release) 1.2.2 _004
Sun JRE (Linux Production Release) 1.2.2 _005
Sun JRE (Linux Production Release) 1.2.2 _006
Sun JRE (Linux Production Release) 1.2.2 _007
Sun JRE (Linux Production Release) 1.2.2 _010
Sun JRE (Linux Production Release) 1.2.2 _011
Sun JRE (Linux Production Release) 1.2.2 _013
Sun JRE (Linux Production Release) 1.2.2 _014
Sun JRE (Linux Production Release) 1.2.2 _015
Sun JRE (Linux Production Release) 1.2.2 _12
Sun JRE (Linux Production Release) 1.3.0 .0
Sun JRE (Linux Production Release) 1.3.0 .0_01
Sun JRE (Linux Production Release) 1.3.0 .0_02
Sun JRE (Linux Production Release) 1.3.0 .0_03
Sun JRE (Linux Production Release) 1.3.0 .0_04
Sun JRE (Linux Production Release) 1.3.0 .0_05
Sun JRE (Linux Production Release) 1.3.1
Sun JRE (Linux Production Release) 1.3.1 _01
Sun JRE (Linux Production Release) 1.3.1 _02
Sun JRE (Linux Production Release) 1.3.1 _03
Sun JRE (Linux Production Release) 1.3.1 _05
Sun JRE (Linux Production Release) 1.3.1 _06
Sun JRE (Linux Production Release) 1.3.1 _07
Sun JRE (Linux Production Release) 1.3.1 _08
Sun JRE (Linux Production Release) 1.3.1 _09
Sun JRE (Linux Production Release) 1.3.1 _10
Sun JRE (Linux Production Release) 1.3.1 _11
Sun JRE (Linux Production Release) 1.3.1 _12
Sun JRE (Linux Production Release) 1.3.1 _13
Sun JRE (Linux Production Release) 1.3.1 _14
Sun JRE (Linux Production Release) 1.3.1 _21
Sun JRE (Linux Production Release) 1.3.1_01a
Sun JRE (Linux Production Release) 1.3.1_04
Sun JRE (Linux Production Release) 1.3.1_15
Sun JRE (Linux Production Release) 1.3.1_16
Sun JRE (Linux Production Release) 1.3.1_17
Sun JRE (Linux Production Release) 1.3.1_18
Sun JRE (Linux Production Release) 1.3.1_19
Sun JRE (Linux Production Release) 1.3.1_20
Sun JRE (Linux Production Release) 1.3.1_21
Sun JRE (Linux Production Release) 1.3.1_22
Sun JRE (Linux Production Release) 1.3.1_23
Sun JRE (Linux Production Release) 1.3.1_25
Sun JRE (Linux Production Release) 1.3.1_26
Sun JRE (Linux Production Release) 1.4.0
Sun JRE (Linux Production Release) 1.4.0 .0_02
Sun JRE (Linux Production Release) 1.4.0 .0_03
Sun JRE (Linux Production Release) 1.4.0 .0_04
Sun JRE (Linux Production Release) 1.4.1
Sun JRE (Linux Production Release) 1.4.1 _01
Sun JRE (Linux Production Release) 1.4.1 _02
Sun JRE (Linux Production Release) 1.4.1 _03
Sun JRE (Linux Production Release) 1.4.2
Sun JRE (Linux Production Release) 1.4.2 _01
Sun JRE (Linux Production Release) 1.4.2 _02
Sun JRE (Linux Production Release) 1.4.2 _03
Sun JRE (Linux Production Release) 1.4.2 _04
Sun JRE (Linux Production Release) 1.4.2 _05
Sun JRE (Linux Production Release) 1.4.2 _06
Sun JRE (Linux Production Release) 1.4.2_07
Sun JRE (Linux Production Release) 1.4.2_08
Sun JRE (Linux Production Release) 1.4.2_09
Sun JRE (Linux Production Release) 1.4.2_10
Sun JRE (Linux Production Release) 1.4.2_10-b03
Sun JRE (Linux Production Release) 1.4.2_11
Sun JRE (Linux Production Release) 1.4.2_12
Sun JRE (Linux Production Release) 1.4.2_13
Sun JRE (Linux Production Release) 1.4.2_14
Sun JRE (Linux Production Release) 1.4.2_15
Sun JRE (Linux Production Release) 1.4.2_16
Sun JRE (Linux Production Release) 1.4.2_17
Sun JRE (Linux Production Release) 1.4.2_18
Sun JRE (Linux Production Release) 1.4.2_19
Sun JRE (Linux Production Release) 1.4.2_20
Sun JRE (Linux Production Release) 1.4.2_22
Sun JRE (Linux Production Release) 1.5.0
Sun JRE (Linux Production Release) 1.5.0 .0 beta
Sun JRE (Linux Production Release) 1.5.0_01
Sun JRE (Linux Production Release) 1.5.0_02
Sun JRE (Linux Production Release) 1.5.0_03
Sun JRE (Linux Production Release) 1.5.0_04
Sun JRE (Linux Production Release) 1.5.0_05
Sun JRE (Linux Production Release) 1.5.0_06
Sun JRE (Linux Production Release) 1.5.0_07
Sun JRE (Linux Production Release) 1.5.0_08
Sun JRE (Linux Production Release) 1.5.0_09
Sun JRE (Linux Production Release) 1.5.0_10
Sun JRE (Linux Production Release) 1.5.0_11
Sun JRE (Linux Production Release) 1.5.0_12
Sun JRE (Linux Production Release) 1.5.0_12
Sun JRE (Linux Production Release) 1.5.0_13
Sun JRE (Linux Production Release) 1.5.0_13
Sun JRE (Linux Production Release) 1.5.0_14
Sun JRE (Linux Production Release) 1.5.0_17
Sun JRE (Linux Production Release) 1.5.0_20
Sun JRE (Linux Production Release) 1.6.0_01
Sun JRE (Linux Production Release) 1.6.0_02
Sun JRE (Linux Production Release) 1.6.0_03
Sun JRE (Linux Production Release) 1.6.0_03
Sun JRE (Linux Production Release) 1.6.0_11
Sun JRE (Linux Production Release) 1.6.0_14
Sun JRE (Linux Production Release) 1.6.0_15
Sun JRE (Linux Production Release) 1.6.0_2
Sun JRE (Solaris Production Release) 1.1.6
Sun JRE (Solaris Production Release) 1.1.7 B
Sun JRE (Solaris Production Release) 1.1.8
Sun JRE (Solaris Production Release) 1.1.8 _009
Sun JRE (Solaris Production Release) 1.1.8 _10
Sun JRE (Solaris Production Release) 1.1.8 _12
Sun JRE (Solaris Production Release) 1.1.8 _13
Sun JRE (Solaris Production Release) 1.1.8 _14
Sun JRE (Solaris Production Release) 1.2.0
Sun JRE (Solaris Production Release) 1.2.1
Sun JRE (Solaris Production Release) 1.2.2
Sun JRE (Solaris Production Release) 1.2.2 _010
Sun JRE (Solaris Production Release) 1.2.2 _011
Sun JRE (Solaris Production Release) 1.2.2 _012
Sun JRE (Solaris Production Release) 1.2.2 _013
Sun JRE (Solaris Production Release) 1.2.2 _014
Sun JRE (Solaris Production Release) 1.2.2 _05a
Sun JRE (Solaris Production Release) 1.2.2 _07
Sun JRE (Solaris Production Release) 1.2.2 _11
Sun JRE (Solaris Production Release) 1.2.2 _11
Sun JRE (Solaris Production Release) 1.3.0
Sun JRE (Solaris Production Release) 1.3.0 .0_02
Sun JRE (Solaris Production Release) 1.3.0 .0_02
Sun JRE (Solaris Production Release) 1.3.0 .0_05
Sun JRE (Solaris Production Release) 1.3.0_01
Sun JRE (Solaris Production Release) 1.3.0_03
Sun JRE (Solaris Production Release) 1.3.0_04
Sun JRE (Solaris Production Release) 1.3.1
Sun JRE (Solaris Production Release) 1.3.1
Sun JRE (Solaris Production Release) 1.3.1 _01
Sun JRE (Solaris Production Release) 1.3.1 _01a
Sun JRE (Solaris Production Release) 1.3.1 _02
Sun JRE (Solaris Production Release) 1.3.1 _03
Sun JRE (Solaris Production Release) 1.3.1 _04
Sun JRE (Solaris Production Release) 1.3.1 _05
Sun JRE (Solaris Production Release) 1.3.1 _06
Sun JRE (Solaris Production Release) 1.3.1 _07
Sun JRE (Solaris Production Release) 1.3.1 _08
Sun JRE (Solaris Production Release) 1.3.1 _09
Sun JRE (Solaris Production Release) 1.3.1 _10
Sun JRE (Solaris Production Release) 1.3.1 _11
Sun JRE (Solaris Production Release) 1.3.1 _12
Sun JRE (Solaris Production Release) 1.3.1 _13
Sun JRE (Solaris Production Release) 1.3.1 _14
Sun JRE (Solaris Production Release) 1.3.1_15
Sun JRE (Solaris Production Release) 1.3.1_16
Sun JRE (Solaris Production Release) 1.3.1_17
Sun JRE (Solaris Production Release) 1.3.1_18
Sun JRE (Solaris Production Release) 1.3.1_19
Sun JRE (Solaris Production Release) 1.3.1_20
Sun JRE (Solaris Production Release) 1.3.1_21
Sun JRE (Solaris Production Release) 1.3.1_22
Sun JRE (Solaris Production Release) 1.3.1_23
Sun JRE (Solaris Production Release) 1.3.1_25
Sun JRE (Solaris Production Release) 1.3.1_26
Sun JRE (Solaris Production Release) 1.4.0
Sun JRE (Solaris Production Release) 1.4.0 .0_01
Sun JRE (Solaris Production Release) 1.4.0 .0_02
Sun JRE (Solaris Production Release) 1.4.0 .0_03
Sun JRE (Solaris Production Release) 1.4.0 .0_04
Sun JRE (Solaris Production Release) 1.4.0 .0_04
Sun JRE (Solaris Production Release) 1.4.1
Sun JRE (Solaris Production Release) 1.4.1 _01
Sun JRE (Solaris Production Release) 1.4.1 _02
Sun JRE (Solaris Production Release) 1.4.1 _03
Sun JRE (Solaris Production Release) 1.4.2
Sun JRE (Solaris Production Release) 1.4.2 _01
Sun JRE (Solaris Production Release) 1.4.2 _02
Sun JRE (Solaris Production Release) 1.4.2 _03
Sun JRE (Solaris Production Release) 1.4.2 _04
Sun JRE (Solaris Production Release) 1.4.2 _05
Sun JRE (Solaris Production Release) 1.4.2 _06
Sun JRE (Solaris Production Release) 1.4.2_07
Sun JRE (Solaris Production Release) 1.4.2_08
Sun JRE (Solaris Production Release) 1.4.2_09
Sun JRE (Solaris Production Release) 1.4.2_10
Sun JRE (Solaris Production Release) 1.4.2_11
Sun JRE (Solaris Production Release) 1.4.2_12
Sun JRE (Solaris Production Release) 1.4.2_13
Sun JRE (Solaris Production Release) 1.4.2_14
Sun JRE (Solaris Production Release) 1.4.2_15
Sun JRE (Solaris Production Release) 1.4.2_16
Sun JRE (Solaris Production Release) 1.4.2_17
Sun JRE (Solaris Production Release) 1.4.2_18
Sun JRE (Solaris Production Release) 1.4.2_19
Sun JRE (Solaris Production Release) 1.4.2_20
Sun JRE (Solaris Production Release) 1.4.2_22
Sun JRE (Solaris Production Release) 1.5.0
Sun JRE (Solaris Production Release) 1.5.0 _01
Sun JRE (Solaris Production Release) 1.5.0.0_07
Sun JRE (Solaris Production Release) 1.5.0.0_08
Sun JRE (Solaris Production Release) 1.5.0.0_09
Sun JRE (Solaris Production Release) 1.5.0_02
Sun JRE (Solaris Production Release) 1.5.0_03
Sun JRE (Solaris Production Release) 1.5.0_04
Sun JRE (Solaris Production Release) 1.5.0_05
Sun JRE (Solaris Production Release) 1.5.0_06
Sun JRE (Solaris Production Release) 1.5.0_10
Sun JRE (Solaris Production Release) 1.5.0_11
Sun JRE (Solaris Production Release) 1.5.0_12
Sun JRE (Solaris Production Release) 1.5.0_13
Sun JRE (Solaris Production Release) 1.5.0_14
Sun JRE (Solaris Production Release) 1.5.0_17
Sun JRE (Solaris Production Release) 1.5.0_20
Sun JRE (Solaris Production Release) 1.6.0_01
Sun JRE (Solaris Production Release) 1.6.0_02
Sun JRE (Solaris Production Release) 1.6.0_03
Sun JRE (Solaris Production Release) 1.6.0_11
Sun JRE (Solaris Production Release) 1.6.0_14
Sun JRE (Solaris Production Release) 1.6.0_15
Sun JRE (Solaris Production Release) 1.6.0_2
Sun JRE (Windows Production Release) 1.1.6 _009
Sun JRE (Windows Production Release) 1.1.7 B_007
Sun JRE (Windows Production Release) 1.1.8
Sun JRE (Windows Production Release) 1.1.8 _005
Sun JRE (Windows Production Release) 1.1.8 _007
Sun JRE (Windows Production Release) 1.1.8 _008
Sun JRE (Windows Production Release) 1.1.8 _009
Sun JRE (Windows Production Release) 1.2.0
Sun JRE (Windows Production Release) 1.2.1
Sun JRE (Windows Production Release) 1.2.2
Sun JRE (Windows Production Release) 1.2.2 _007
Sun JRE (Windows Production Release) 1.2.2 _007
Sun JRE (Windows Production Release) 1.2.2 _010
Sun JRE (Windows Production Release) 1.2.2 _011
Sun JRE (Windows Production Release) 1.2.2 _013
Sun JRE (Windows Production Release) 1.2.2 _014
Sun JRE (Windows Production Release) 1.2.2 _015
Sun JRE (Windows Production Release) 1.2.2 _12
Sun JRE (Windows Production Release) 1.3.0
Sun JRE (Windows Production Release) 1.3.0 .0_02
Sun JRE (Windows Production Release) 1.3.0 .0_02
Sun JRE (Windows Production Release) 1.3.0 .0_04
Sun JRE (Windows Production Release) 1.3.0 .0_05
Sun JRE (Windows Production Release) 1.3.0 _01
Sun JRE (Windows Production Release) 1.3.1
Sun JRE (Windows Production Release) 1.3.1 _01
Sun JRE (Windows Production Release) 1.3.1 _01a
Sun JRE (Windows Production Release) 1.3.1 _02
Sun JRE (Windows Production Release) 1.3.1 _03
Sun JRE (Windows Production Release) 1.3.1 _04
Sun JRE (Windows Production Release) 1.3.1 _05
Sun JRE (Windows Production Release) 1.3.1 _06
Sun JRE (Windows Production Release) 1.3.1 _07
Sun JRE (Windows Production Release) 1.3.1 _08
Sun JRE (Windows Production Release) 1.3.1 _09
Sun JRE (Windows Production Release) 1.3.1 _10
Sun JRE (Windows Production Release) 1.3.1 _11
Sun JRE (Windows Production Release) 1.3.1 _12
Sun JRE (Windows Production Release) 1.3.1 _13
Sun JRE (Windows Production Release) 1.3.1 _14
Sun JRE (Windows Production Release) 1.3.1_15
Sun JRE (Windows Production Release) 1.3.1_16
Sun JRE (Windows Production Release) 1.3.1_17
Sun JRE (Windows Production Release) 1.3.1_18
Sun JRE (Windows Production Release) 1.3.1_19
Sun JRE (Windows Production Release) 1.3.1_20
Sun JRE (Windows Production Release) 1.3.1_21
Sun JRE (Windows Production Release) 1.3.1_22
Sun JRE (Windows Production Release) 1.3.1_23
Sun JRE (Windows Production Release) 1.3.1_25
Sun JRE (Windows Production Release) 1.3.1_26
Sun JRE (Windows Production Release) 1.4.0
Sun JRE (Windows Production Release) 1.4.0 .0_01
Sun JRE (Windows Production Release) 1.4.0 .0_02
Sun JRE (Windows Production Release) 1.4.0 .0_03
Sun JRE (Windows Production Release) 1.4.0 .0_04
Sun JRE (Windows Production Release) 1.4.1
Sun JRE (Windows Production Release) 1.4.1 _01
Sun JRE (Windows Production Release) 1.4.1 _02
Sun JRE (Windows Production Release) 1.4.1 _03
Sun JRE (Windows Production Release) 1.4.1 _07
Sun JRE (Windows Production Release) 1.4.2
Sun JRE (Windows Production Release) 1.4.2 _01
Sun JRE (Windows Production Release) 1.4.2 _02
Sun JRE (Windows Production Release) 1.4.2 _03
Sun JRE (Windows Production Release) 1.4.2 _04
Sun JRE (Windows Production Release) 1.4.2 _05
Sun JRE (Windows Production Release) 1.4.2 _05
Sun JRE (Windows Production Release) 1.4.2 _06
Sun JRE (Windows Production Release) 1.4.2_07
Sun JRE (Windows Production Release) 1.4.2_08
Sun JRE (Windows Production Release) 1.4.2_09
Sun JRE (Windows Production Release) 1.4.2_10
Sun JRE (Windows Production Release) 1.4.2_11
Sun JRE (Windows Production Release) 1.4.2_12
Sun JRE (Windows Production Release) 1.4.2_13
Sun JRE (Windows Production Release) 1.4.2_14
Sun JRE (Windows Production Release) 1.4.2_15
Sun JRE (Windows Production Release) 1.4.2_16
Sun JRE (Windows Production Release) 1.4.2_17
Sun JRE (Windows Production Release) 1.4.2_18
Sun JRE (Windows Production Release) 1.4.2_19
Sun JRE (Windows Production Release) 1.4.2_20
Sun JRE (Windows Production Release) 1.4.2_22
Sun JRE (Windows Production Release) 1.5.0
Sun JRE (Windows Production Release) 1.5.0.0_07
Sun JRE (Windows Production Release) 1.5.0.0_08
Sun JRE (Windows Production Release) 1.5.0.0_09
Sun JRE (Windows Production Release) 1.5.0_01
Sun JRE (Windows Production Release) 1.5.0_02
Sun JRE (Windows Production Release) 1.5.0_03
Sun JRE (Windows Production Release) 1.5.0_04
Sun JRE (Windows Production Release) 1.5.0_05
Sun JRE (Windows Production Release) 1.5.0_06
Sun JRE (Windows Production Release) 1.5.0_10
Sun JRE (Windows Production Release) 1.5.0_10
Sun JRE (Windows Production Release) 1.5.0_11
Sun JRE (Windows Production Release) 1.5.0_12
Sun JRE (Windows Production Release) 1.5.0_13
Sun JRE (Windows Production Release) 1.5.0_14
Sun JRE (Windows Production Release) 1.5.0_17
Sun JRE (Windows Production Release) 1.5.0_20
Sun JRE (Windows Production Release) 1.6.0_01
Sun JRE (Windows Production Release) 1.6.0_02
Sun JRE (Windows Production Release) 1.6.0_03
Sun JRE (Windows Production Release) 1.6.0_11
Sun JRE (Windows Production Release) 1.6.0_14
Sun JRE (Windows Production Release) 1.6.0_15
Sun JRE (Windows Production Release) 1.6.0_2
Sun JRE 5.0 Update 10
Sun JRE 5.0 Update 11
Sun JRE 5.0 Update 12
Sun JRE 5.0 Update 13
Sun JRE 5.0 Update 14
Sun JRE 5.0 Update 15
Sun JRE 5.0 Update 15
Sun JRE 5.0 Update 16
Sun JRE 5.0 Update 17
Sun JRE 5.0 Update 18
Sun JRE 5.0 Update 20
Sun JRE 5.0 Update 6
Sun JRE 5.0 Update 7
Sun JRE 5.0 Update 8
Sun JRE 5.0 Update 9
Sun JRE 6.0 Update 1
Sun JRE 6.0 Update 10
Sun JRE 6.0 Update 11
Sun JRE 6.0 Update 12
Sun JRE 6.0 Update 13
Sun JRE 6.0 Update 14
Sun JRE 6.0 Update 15
Sun JRE 6.0 Update 2
Sun JRE 6.0 Update 3
Sun JRE 6.0 Update 4
Sun JRE 6.0 Update 5
Sun JRE 6.0 Update 6
Sun JRE 6.0 Update 7
Sun SDK (Linux Production Release) 1.2.2 _005
Sun SDK (Linux Production Release) 1.2.2 _007
Sun SDK (Linux Production Release) 1.2.2 _010
Sun SDK (Linux Production Release) 1.2.2 _011
Sun SDK (Linux Production Release) 1.2.2 _014
Sun SDK (Linux Production Release) 1.2.2 _015
Sun SDK (Linux Production Release) 1.2.2 _12
Sun SDK (Linux Production Release) 1.2.2 _13
Sun SDK (Linux Production Release) 1.3.0 .0_02
Sun SDK (Linux Production Release) 1.3.0 _02
Sun SDK (Linux Production Release) 1.3.0 _05
Sun SDK (Linux Production Release) 1.3.1 _01
Sun SDK (Linux Production Release) 1.3.1 _02
Sun SDK (Linux Production Release) 1.3.1 _03
Sun SDK (Linux Production Release) 1.3.1 _05
Sun SDK (Linux Production Release) 1.3.1 _06
Sun SDK (Linux Production Release) 1.3.1 _07
Sun SDK (Linux Production Release) 1.3.1 _08
Sun SDK (Linux Production Release) 1.3.1 _09
Sun SDK (Linux Production Release) 1.3.1 _10
Sun SDK (Linux Production Release) 1.3.1 _11
Sun SDK (Linux Production Release) 1.3.1 _12
Sun SDK (Linux Production Release) 1.3.1 _13
Sun SDK (Linux Production Release) 1.3.1 _14
Sun SDK (Linux Production Release) 1.3.1 _15
Sun SDK (Linux Production Release) 1.3.1 _21
Sun SDK (Linux Production Release) 1.3.1 _22
Sun SDK (Linux Production Release) 1.3.1 _23
Sun SDK (Linux Production Release) 1.3.1_20
Sun SDK (Linux Production Release) 1.3.1_24
Sun SDK (Linux Production Release) 1.3.1_25
Sun SDK (Linux Production Release) 1.3.1_26
Sun SDK (Linux Production Release) 1.4.0
Sun SDK (Linux Production Release) 1.4.0 .0_02
Sun SDK (Linux Production Release) 1.4.0 .0_03
Sun SDK (Linux Production Release) 1.4.0 .0_4
Sun SDK (Linux Production Release) 1.4.1
Sun SDK (Linux Production Release) 1.4.1 _01
Sun SDK (Linux Production Release) 1.4.1 _02
Sun SDK (Linux Production Release) 1.4.1 _03
Sun SDK (Linux Production Release) 1.4.2
Sun SDK (Linux Production Release) 1.4.2 _01
Sun SDK (Linux Production Release) 1.4.2 _02
Sun SDK (Linux Production Release) 1.4.2 _03
Sun SDK (Linux Production Release) 1.4.2 _04
Sun SDK (Linux Production Release) 1.4.2 _05
Sun SDK (Linux Production Release) 1.4.2 _08
Sun SDK (Linux Production Release) 1.4.2_09
Sun SDK (Linux Production Release) 1.4.2_10
Sun SDK (Linux Production Release) 1.4.2_11
Sun SDK (Linux Production Release) 1.4.2_12
Sun SDK (Linux Production Release) 1.4.2_13
Sun SDK (Linux Production Release) 1.4.2_14
Sun SDK (Linux Production Release) 1.4.2_15
Sun SDK (Linux Production Release) 1.4.2_15
Sun SDK (Linux Production Release) 1.4.2_16
Sun SDK (Linux Production Release) 1.4.2_17
Sun SDK (Linux Production Release) 1.4.2_18
Sun SDK (Linux Production Release) 1.4.2_19
Sun SDK (Linux Production Release) 1.4.2_20
Sun SDK (Linux Production Release) 1.4.2_22
Sun SDK (Solaris Production Release) 1.2.0
Sun SDK (Solaris Production Release) 1.2.1
Sun SDK (Solaris Production Release) 1.2.2
Sun SDK (Solaris Production Release) 1.2.2 _011
Sun SDK (Solaris Production Release) 1.2.2 _05a
Sun SDK (Solaris Production Release) 1.2.2 _07
Sun SDK (Solaris Production Release) 1.2.2 _07a
Sun SDK (Solaris Production Release) 1.2.2 _10
Sun SDK (Solaris Production Release) 1.2.2 _10
Sun SDK (Solaris Production Release) 1.2.2 _11
Sun SDK (Solaris Production Release) 1.2.2 _12
Sun SDK (Solaris Production Release) 1.2.2 _13
Sun SDK (Solaris Production Release) 1.2.2 _14
Sun SDK (Solaris Production Release) 1.3.0
Sun SDK (Solaris Production Release) 1.3.0 .0_02
Sun SDK (Solaris Production Release) 1.3.0 _02
Sun SDK (Solaris Production Release) 1.3.0 _05
Sun SDK (Solaris Production Release) 1.3.1 _01
Sun SDK (Solaris Production Release) 1.3.1 _02
Sun SDK (Solaris Production Release) 1.3.1 _03
Sun SDK (Solaris Production Release) 1.3.1 _05
Sun SDK (Solaris Production Release) 1.3.1 _06
Sun SDK (Solaris Production Release) 1.3.1 _07
Sun SDK (Solaris Production Release) 1.3.1 _08
Sun SDK (Solaris Production Release) 1.3.1 _09
Sun SDK (Solaris Production Release) 1.3.1 _10
Sun SDK (Solaris Production Release) 1.3.1 _11
Sun SDK (Solaris Production Release) 1.3.1 _12
Sun SDK (Solaris Production Release) 1.3.1 _13
Sun SDK (Solaris Production Release) 1.3.1 _14
Sun SDK (Solaris Production Release) 1.3.1 _15
Sun SDK (Solaris Production Release) 1.3.1 _20
Sun SDK (Solaris Production Release) 1.3.1 _21
Sun SDK (Solaris Production Release) 1.3.1 _22
Sun SDK (Solaris Production Release) 1.3.1 _23
Sun SDK (Solaris Production Release) 1.3.1_20
Sun SDK (Solaris Production Release) 1.3.1_24
Sun SDK (Solaris Production Release) 1.3.1_25
Sun SDK (Solaris Production Release) 1.3.1_26
Sun SDK (Solaris Production Release) 1.4.0
Sun SDK (Solaris Production Release) 1.4.0 .0_02
Sun SDK (Solaris Production Release) 1.4.0 .0_03
Sun SDK (Solaris Production Release) 1.4.0 .0_4
Sun SDK (Solaris Production Release) 1.4.1
Sun SDK (Solaris Production Release) 1.4.1 _01
Sun SDK (Solaris Production Release) 1.4.1 _02
Sun SDK (Solaris Production Release) 1.4.1 _03
Sun SDK (Solaris Production Release) 1.4.2
Sun SDK (Solaris Production Release) 1.4.2 _03
Sun SDK (Solaris Production Release) 1.4.2 _04
Sun SDK (Solaris Production Release) 1.4.2 _05
Sun SDK (Solaris Production Release) 1.4.2 _08
Sun SDK (Solaris Production Release) 1.4.2_09
Sun SDK (Solaris Production Release) 1.4.2_10
Sun SDK (Solaris Production Release) 1.4.2_11
Sun SDK (Solaris Production Release) 1.4.2_12
Sun SDK (Solaris Production Release) 1.4.2_13
Sun SDK (Solaris Production Release) 1.4.2_14
Sun SDK (Solaris Production Release) 1.4.2_15
Sun SDK (Solaris Production Release) 1.4.2_15
Sun SDK (Solaris Production Release) 1.4.2_16
Sun SDK (Solaris Production Release) 1.4.2_17
Sun SDK (Solaris Production Release) 1.4.2_18
Sun SDK (Solaris Production Release) 1.4.2_19
Sun SDK (Solaris Production Release) 1.4.2_20
Sun SDK (Solaris Production Release) 1.4.2_22
Sun SDK (Windows Production Release) 1.1.8 _007
Sun SDK (Windows Production Release) 1.2.0
Sun SDK (Windows Production Release) 1.2.1
Sun SDK (Windows Production Release) 1.2.2 _007
Sun SDK (Windows Production Release) 1.2.2 _010
Sun SDK (Windows Production Release) 1.2.2 _011
Sun SDK (Windows Production Release) 1.2.2 _012
Sun SDK (Windows Production Release) 1.2.2 _012
Sun SDK (Windows Production Release) 1.2.2 _013
Sun SDK (Windows Production Release) 1.2.2 _014
Sun SDK (Windows Production Release) 1.2.2 _015
Sun SDK (Windows Production Release) 1.3.0 .0_02
Sun SDK (Windows Production Release) 1.3.0 .0_02
Sun SDK (Windows Production Release) 1.3.0 .0_05
Sun SDK (Windows Production Release) 1.3.1 _01a
Sun SDK (Windows Production Release) 1.3.1 _02
Sun SDK (Windows Production Release) 1.3.1 _03
Sun SDK (Windows Production Release) 1.3.1 _04
Sun SDK (Windows Production Release) 1.3.1 _05
Sun SDK (Windows Production Release) 1.3.1 _06
Sun SDK (Windows Production Release) 1.3.1 _07
Sun SDK (Windows Production Release) 1.3.1 _08
Sun SDK (Windows Production Release) 1.3.1 _09
Sun SDK (Windows Production Release) 1.3.1 _10
Sun SDK (Windows Production Release) 1.3.1 _11
Sun SDK (Windows Production Release) 1.3.1 _12
Sun SDK (Windows Production Release) 1.3.1 _13
Sun SDK (Windows Production Release) 1.3.1 _14
Sun SDK (Windows Production Release) 1.3.1 _15
Sun SDK (Windows Production Release) 1.3.1 _21
Sun SDK (Windows Production Release) 1.3.1_20
Sun SDK (Windows Production Release) 1.3.1_22
Sun SDK (Windows Production Release) 1.3.1_23
Sun SDK (Windows Production Release) 1.3.1_24
Sun SDK (Windows Production Release) 1.3.1_25
Sun SDK (Windows Production Release) 1.3.1_26
Sun SDK (Windows Production Release) 1.4.0
Sun SDK (Windows Production Release) 1.4.0 .0_01
Sun SDK (Windows Production Release) 1.4.0 .0_02
Sun SDK (Windows Production Release) 1.4.0 .0_03
Sun SDK (Windows Production Release) 1.4.0 .0_4
Sun SDK (Windows Production Release) 1.4.1
Sun SDK (Windows Production Release) 1.4.1 _01
Sun SDK (Windows Production Release) 1.4.1 _02
Sun SDK (Windows Production Release) 1.4.1 _03
Sun SDK (Windows Production Release) 1.4.2
Sun SDK (Windows Production Release) 1.4.2 _03
Sun SDK (Windows Production Release) 1.4.2 _04
Sun SDK (Windows Production Release) 1.4.2 _05
Sun SDK (Windows Production Release) 1.4.2 _08
Sun SDK (Windows Production Release) 1.4.2_09
Sun SDK (Windows Production Release) 1.4.2_10
Sun SDK (Windows Production Release) 1.4.2_11
Sun SDK (Windows Production Release) 1.4.2_12
Sun SDK (Windows Production Release) 1.4.2_13
Sun SDK (Windows Production Release) 1.4.2_14
Sun SDK (Windows Production Release) 1.4.2_15
Sun SDK (Windows Production Release) 1.4.2_15
Sun SDK (Windows Production Release) 1.4.2_16
Sun SDK (Windows Production Release) 1.4.2_17
Sun SDK (Windows Production Release) 1.4.2_18
Sun SDK (Windows Production Release) 1.4.2_19
Sun SDK (Windows Production Release) 1.4.2_20
Sun SDK (Windows Production Release) 1.4.2_22
Sun Solaris 2.6
Sun Solaris 2.6_x86
Sun Solaris 7.0
Sun Solaris 7.0_x86
Sun Solaris 8
Sun Solaris 8_x86
Ubuntu Ubuntu Linux 8.10 amd64
Ubuntu Ubuntu Linux 8.10 i386
Ubuntu Ubuntu Linux 8.10 lpia
Ubuntu Ubuntu Linux 8.10 powerpc
Ubuntu Ubuntu Linux 8.10 sparc
Ubuntu Ubuntu Linux 9.04 amd64
Ubuntu Ubuntu Linux 9.04 i386
Ubuntu Ubuntu Linux 9.04 lpia
Ubuntu Ubuntu Linux 9.04 powerpc
Ubuntu Ubuntu Linux 9.04 sparc
Ubuntu Ubuntu Linux 9.10 amd64
Ubuntu Ubuntu Linux 9.10 i386
Ubuntu Ubuntu Linux 9.10 lpia
Ubuntu Ubuntu Linux 9.10 powerpc
Ubuntu Ubuntu Linux 9.10 sparc

References:

CVE: CVE-2009-2409
CVE: CVE-2009-3728
CVE: CVE-2009-3864
CVE: CVE-2009-3865
CVE: CVE-2009-3866
CVE: CVE-2009-3867
CVE: CVE-2009-3868
CVE: CVE-2009-3869
CVE: CVE-2009-3871
CVE: CVE-2009-3872
CVE: CVE-2009-3873
CVE: CVE-2009-3875
CVE: CVE-2009-3877
CVE: CVE-2009-3879
CVE: CVE-2009-3880
CVE: CVE-2009-3881
CVE: CVE-2009-3882
CVE: CVE-2009-3883
CVE: CVE-2009-3884
CVE: CVE-2009-3885
CVE: CVE-2009-3886
Sun: 269868: The Java Update Mechanism on Non-English Versions Does Not Update the JR
Sun: 269869: Command Execution Vulnerability in the Java Runtime Environment Deployme
Sun: 269870: Security Vulnerability in the Java Web Start Installer
Sun: 270474: Buffer and Integer Overflow Vulnerabilities in the Java Runtime Environm
Sun: 270475: A Security Vulnerability in the Java Runtime Environment With Verifying
Sun: 270476: Two Security Vulnerabilities in the Java Runtime Environment With Decodi
Sun: 29 Oct 2009 Advance notification of Security Updates for Java SE
Sun: Java Homepage
Sun: Java SE 6 Update Release Notes
Zero Day Initiative: Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability
Zero Day Initiative: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability
Zero Day Initiative: Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability
Zero Day Initiative: Sun Java Runtime Environment JPEGImageReader Heap Overflow Vulnerability
Zero Day Initiative: Sun Java Web Start Arbitrary Command Execution Vulnerability

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.

J-Security Center

Title: Sun Java SE November 2009 Multiple Security Vulnerabilities

Severity: CRITICAL

Description:

Affected Products:

References: