9.3 - RHSA-2008:0100

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	java-1.4.2-bea security update

Informations
Name	RHSA-2008:0100	First vendor Publication	2008-03-11
Vendor	RedHat	Last vendor Modification	2008-03-11
Severity (Vendor)	Moderate	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated java-1.4.2-bea packages that correct several security issues and add enhancements are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 Extras - i386, ia64 Red Hat Desktop version 3 Extras - i386 Red Hat Enterprise Linux ES version 3 Extras - i386, ia64 Red Hat Enterprise Linux WS version 3 Extras - i386, ia64 Red Hat Enterprise Linux AS version 4 Extras - i386, ia64, x86_64 Red Hat Desktop version 4 Extras - i386, x86_64 Red Hat Enterprise Linux ES version 4 Extras - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 Extras - i386, ia64, x86_64 RHEL Desktop Supplementary (v. 5 client) - i386, x86_64 RHEL Supplementary (v. 5 server) - i386, ia64, x86_64

3. Description:

The BEA WebLogic JRockit 1.4.2_16 JRE and SDK contains BEA WebLogic JRockit Virtual Machine 1.4.2_16 and is certified for the Java 2 Platform, Standard Edition, v1.4.2.

A buffer overflow in the Java Runtime Environment image handling code was found. If an attacker could induce a server application to process a specially crafted image file, the attacker could potentially cause a denial-of-service or execute arbitrary code as the user running the Java Virtual Machine. (CVE-2007-2788, CVE-2007-2789)

A denial of service flaw was found in the way the JSSE component processed SSL/TLS handshake requests. A remote attacker able to connect to a JSSE enabled service could send a specially crafted handshake which would cause the Java Runtime Environment to stop responding to future requests. (CVE-2007-3698)

A flaw was found in the way the Java Runtime Environment processed font data. An applet viewed via the "appletviewer" application could elevate its privileges, allowing the applet to perform actions with the same permissions as the user running the "appletviewer" application. The same flaw could, potentially, crash a server application which processed untrusted font information from a third party. (CVE-2007-4381)

A flaw in the applet caching mechanism of the Java Runtime Environment (JRE) did not correctly process the creation of network connections. A remote attacker could use this flaw to create connections to services on machines other than the one that the applet was downloaded from. (CVE-2007-5232)

Untrusted Java Applets were able to drag and drop files to a desktop application. A user-assisted remote attacker could use this flaw to move or copy arbitrary files. (CVE-2007-5239)

The Java Runtime Environment (JRE) allowed untrusted Java Applets or applications to display over-sized windows. This could be used by remote attackers to hide security warning banners. (CVE-2007-5240)

Unsigned Java Applets communicating via a HTTP proxy could allow a remote attacker to violate the Java security model. A cached, malicious Applet could create network connections to services on other machines. (CVE-2007-5273)

Please note: the vulnerabilities noted above concerned with applets can only be triggered in java-1.4.2-bea by calling the "appletviewer" application.

All users of java-1.4.2-bea should upgrade to these updated packages, which contain the BEA WebLogic JRockit 1.4.2_16 release which resolves these issues.

4. Solution:

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

5. Bugs fixed (http://bugzilla.redhat.com/):

249539 - CVE-2007-3698 Java Secure Socket Extension Does Not Correctly Process SSL/TLS Handshake Requests Resulting in a Denial of Service (DoS) Condition 250725 - CVE-2007-2788 Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit 250729 - CVE-2007-2789 BMP image parser vulnerability 253488 - CVE-2007-4381 java: Vulnerability in the font parsing code 321951 - CVE-2007-5232 Security Vulnerability in Java Runtime Environment With Applet Caching 321991 - CVE-2007-5240 Applets or Applications are allowed to display an oversized window 324351 - CVE-2007-5273 Anti-DNS Pinning and Java Applets with HTTP proxy

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2008-0100.html

CWE : Common Weakness Enumeration

%	Id	Name
33 %	CWE-399	Resource Management Errors
33 %	CWE-264	Permissions, Privileges, and Access Controls
33 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10290

Oval ID:	oval:org.mitre.oval:def:10290
Title:	Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
Description:	Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-4381	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3 OR redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:10340

Oval ID:	oval:org.mitre.oval:def:10340
Title:	Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
Description:	Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-5273	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3 OR redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:10634

Oval ID:	oval:org.mitre.oval:def:10634
Title:	The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.
Description:	The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-3698	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3 OR redhat-release is version 4 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.12-1jpp.2.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.5.0-sun is earlier than 0:1.5.0.12-1jpp.2.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.12-1jpp.2.el4 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.12-1jpp.2.el4 AND java-1.5.0-sun-src is earlier than 0:1.5.0.12-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.12-1jpp.2.el4 OR redhat-release is version 5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:10783

Oval ID:	oval:org.mitre.oval:def:10783
Title:	Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.
Description:	Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-5240	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3 OR redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:10800

Oval ID:	oval:org.mitre.oval:def:10800
Title:	The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
Description:	The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-2789	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el3 OR redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:11700

Oval ID:	oval:org.mitre.oval:def:11700
Title:	Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
Description:	Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-2788	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el3 OR redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4 AND java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:21711

Oval ID:	oval:org.mitre.oval:def:21711
Title:	ELSA-2007:0817: java-1.4.2-ibm security update (Critical)
Description:	The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
Family:	unix	Class:	patch
Reference(s):	ELSA-2007:0817-01 CVE-2007-2435 CVE-2007-2788 CVE-2007-2789	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:21855

Oval ID:	oval:org.mitre.oval:def:21855
Title:	ELSA-2007:0829: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
Family:	unix	Class:	patch
Reference(s):	ELSA-2007:0829-01 CVE-2007-2435 CVE-2007-2788 CVE-2007-2789 CVE-2007-3503 CVE-2007-3655 CVE-2007-3922 CVE-2007-4381	Version:	33
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5

Definition Id: oval:org.mitre.oval:def:22301

Oval ID:	oval:org.mitre.oval:def:22301
Title:	ELSA-2008:0100: java-1.4.2-bea security update (Moderate)
Description:	Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0100-01 CVE-2007-4381 CVE-2007-2788 CVE-2007-2789 CVE-2007-3698 CVE-2007-5232 CVE-2007-5240 CVE-2007-5273 CVE-2007-5239	Version:	37
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-bea
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22641

Oval ID:	oval:org.mitre.oval:def:22641
Title:	ELSA-2007:0956: java-1.5.0-bea security update (Moderate)
Description:	Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
Family:	unix	Class:	patch
Reference(s):	ELSA-2007:0956-01 CVE-2007-0243 CVE-2007-2788 CVE-2007-2789 CVE-2007-3503 CVE-2007-3698 CVE-2007-4381	Version:	29
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-bea
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:8758

Oval ID:	oval:org.mitre.oval:def:8758
Title:	Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.
Description:	Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-5239	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3 OR redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:9331

Oval ID:	oval:org.mitre.oval:def:9331
Title:	Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound connections via a DNS rebinding attack.
Description:	Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound connections via a DNS rebinding attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-5232	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 3 Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 3 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3 OR redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5 AND java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5 AND java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update1:::::: cpe:2.3:a:sun:jdk:1.6.0:update2:::::: cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update25:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update17:::::: cpe:2.3:a:sun:jdk:1.5.0:update19:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update21:::::: cpe:2.3:a:sun:jdk:1.5.0:update23:::::: cpe:2.3:a:sun:jdk:1.5.0:update18:::::: cpe:2.3:a:sun:jdk:1.5.0:update24:::::: cpe:2.3:a:sun:jdk:1.5.0:update22:::::: cpe:2.3:a:sun:jdk:1.5.0:update20:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update_1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_16:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_10:::::: cpe:2.3:a:sun:jdk:1.5.0:update_4:::::: cpe:2.3:a:sun:jdk:1.5.0:update_9:::::: cpe:2.3:a:sun:jdk:1.5.0:update_14:::::: cpe:2.3:a:sun:jdk:1.5.0:update_20:::::: cpe:2.3:a:sun:jdk:1.5.0:update_21:::::: cpe:2.3:a:sun:jdk:1.5.0:update_7:::::: cpe:2.3:a:sun:jdk:1.5.0:update_18:::::: cpe:2.3:a:sun:jdk:1.5.0:update_6:::::: cpe:2.3:a:sun:jdk:1.5.0:update7_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_12:::::: cpe:2.3:a:sun:jdk:1.5.0:update_2:::::: cpe:2.3:a:sun:jdk:1.5.0:update_13:::::: cpe:2.3:a:sun:jdk:1.5.0:update_3:::::: cpe:2.3:a:sun:jdk:1.5.0:update_15:::::: cpe:2.3:a:sun:jdk:1.5.0:update_17:::::: cpe:2.3:a:sun:jdk:1.5.0:update_19:::::: cpe:2.3:a:sun:jdk:1.5.0:update_5:::::: cpe:2.3:a:sun:jdk:1.5.0:update_22:::::: cpe:2.3:a:sun:jdk:1.5.0:update_8:::::: cpe:2.3:a:sun:jdk:1.5.0:update_11:::::: cpe:2.3:a:sun:jdk:1.5.0:update26:::::: cpe:2.3:a:sun:jdk:1.5.0:update27:::::: cpe:2.3:a:sun:jdk:1.5.0:update35:::::: cpe:2.3:a:sun:jdk:1.5.0:update29:::::: cpe:2.3:a:sun:jdk:1.5.0:update33:::::: cpe:2.3:a:sun:jdk:1.5.0:update31:::::: cpe:2.3:a:sun:jdk:1.5.0:update28:::::: cpe:2.3:a:sun:jdk:1.4.2_9:::::::* cpe:2.3:a:sun:jdk:1.4.2_8:::::::* cpe:2.3:a:sun:jdk:1.4.2_7:::::::* cpe:2.3:a:sun:jdk:1.4.2_6:::::::* cpe:2.3:a:sun:jdk:1.4.2_5:::::::* cpe:2.3:a:sun:jdk:1.4.2_4:::::::* cpe:2.3:a:sun:jdk:1.4.2_37:::::::* cpe:2.3:a:sun:jdk:1.4.2_36:::::::* cpe:2.3:a:sun:jdk:1.4.2_35:::::::* cpe:2.3:a:sun:jdk:1.4.2_34:::::::* cpe:2.3:a:sun:jdk:1.4.2_33:::::::* cpe:2.3:a:sun:jdk:1.4.2_32:::::::* cpe:2.3:a:sun:jdk:1.4.2_31:::::::* cpe:2.3:a:sun:jdk:1.4.2_30:::::::* cpe:2.3:a:sun:jdk:1.4.2_3:::::::* cpe:2.3:a:sun:jdk:1.4.2_29:::::::* cpe:2.3:a:sun:jdk:1.4.2_28:::::::* cpe:2.3:a:sun:jdk:1.4.2_27:::::::* cpe:2.3:a:sun:jdk:1.4.2_26:::::::* cpe:2.3:a:sun:jdk:1.4.2_25:::::::* cpe:2.3:a:sun:jdk:1.4.2_24:::::::* cpe:2.3:a:sun:jdk:1.4.2_24::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_23:::::::* cpe:2.3:a:sun:jdk:1.4.2_22:::::::* cpe:2.3:a:sun:jdk:1.4.2_21:::::::* cpe:2.3:a:sun:jdk:1.4.2_20:::::::* cpe:2.3:a:sun:jdk:1.4.2_2:::::::* cpe:2.3:a:sun:jdk:1.4.2_19:::::::* cpe:2.3:a:sun:jdk:1.4.2_18:::::::* cpe:2.3:a:sun:jdk:1.4.2_17:::::::* cpe:2.3:a:sun:jdk:1.4.2_16:::::::* cpe:2.3:a:sun:jdk:1.4.2_15:::::::* cpe:2.3:a:sun:jdk:1.4.2_14:::::::* cpe:2.3:a:sun:jdk:1.4.2_13:::::::* cpe:2.3:a:sun:jdk:1.4.2_12:::::::* cpe:2.3:a:sun:jdk:1.4.2_11:::::::* cpe:2.3:a:sun:jdk:1.4.2_10:::::::* cpe:2.3:a:sun:jdk:1.4.2_1:::::::* cpe:2.3:a:sun:jdk:1.4.2_08::windows::::: cpe:2.3:a:sun:jdk:1.4.2_08::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_08::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::windows::::: cpe:2.3:a:sun:jdk:1.4.2_05::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::linux::::: cpe:2.3:a:sun:jdk:1.4.2_04::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::linux::::: cpe:2.3:a:sun:jdk:1.4.2_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_02::linux::::: cpe:2.3:a:sun:jdk:1.4.2_01::linux::::: cpe:2.3:a:sun:jdk:1.4.2::solaris::::: cpe:2.3:a:sun:jdk:1.4.2::windows::::: cpe:2.3:a:sun:jdk:1.4.2::linux::::: cpe:2.3:a:sun:jdk:1.4.2:-:::::: cpe:2.3:a:sun:jdk:1.4.1_07:::::::* cpe:2.3:a:sun:jdk:1.4.1_06:::::::* cpe:2.3:a:sun:jdk:1.4.1_05:::::::* cpe:2.3:a:sun:jdk:1.4.1_04:::::::* cpe:2.3:a:sun:jdk:1.4.1_03:::::::* cpe:2.3:a:sun:jdk:1.4.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_03::windows::::: cpe:2.3:a:sun:jdk:1.4.1_03::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02:::::::* cpe:2.3:a:sun:jdk:1.4.1_02::windows::::: cpe:2.3:a:sun:jdk:1.4.1_02::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01:::::::* cpe:2.3:a:sun:jdk:1.4.1_01::linux::::: cpe:2.3:a:sun:jdk:1.4.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01::windows::::: cpe:2.3:a:sun:jdk:1.4.1:::::::* cpe:2.3:a:sun:jdk:1.4.1::windows::::: cpe:2.3:a:sun:jdk:1.4.1::solaris::::: cpe:2.3:a:sun:jdk:1.4.1::linux::::: cpe:2.3:a:sun:jdk:1.4.0_4::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_4::windows::::: cpe:2.3:a:sun:jdk:1.4.0_4::linux::::: cpe:2.3:a:sun:jdk:1.4.0_04:::::::* cpe:2.3:a:sun:jdk:1.4.0_03:::::::* cpe:2.3:a:sun:jdk:1.4.0_03::linux::::: cpe:2.3:a:sun:jdk:1.4.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_03::windows::::: cpe:2.3:a:sun:jdk:1.4.0_02:::::::* cpe:2.3:a:sun:jdk:1.4.0_02::linux::::: cpe:2.3:a:sun:jdk:1.4.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_02::windows::::: cpe:2.3:a:sun:jdk:1.4.0_01:::::::* cpe:2.3:a:sun:jdk:1.4.0_01::windows::::: cpe:2.3:a:sun:jdk:1.4.0:-:::::: cpe:2.3:a:sun:jdk:1.4::linux::::: cpe:2.3:a:sun:jdk:1.4::windows::::: cpe:2.3:a:sun:jdk:1.4::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_28:::::::* cpe:2.3:a:sun:jdk:1.3.1_27:::::::* cpe:2.3:a:sun:jdk:1.3.1_26:::::::* cpe:2.3:a:sun:jdk:1.3.1_25:::::::* cpe:2.3:a:sun:jdk:1.3.1_24:::::::* cpe:2.3:a:sun:jdk:1.3.1_23:::::::* cpe:2.3:a:sun:jdk:1.3.1_22:::::::* cpe:2.3:a:sun:jdk:1.3.1_21:::::::* cpe:2.3:a:sun:jdk:1.3.1_20:::::::* cpe:2.3:a:sun:jdk:1.3.1_19:::::::* cpe:2.3:a:sun:jdk:1.3.1_18:::::::* cpe:2.3:a:sun:jdk:1.3.1_17:::::::* cpe:2.3:a:sun:jdk:1.3.1_16:::::::* cpe:2.3:a:sun:jdk:1.3.1_15:::::::* cpe:2.3:a:sun:jdk:1.3.1_15::linux::::: cpe:2.3:a:sun:jdk:1.3.1_15::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_15::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14:::::::* cpe:2.3:a:sun:jdk:1.3.1_14::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_14::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14::linux::::: cpe:2.3:a:sun:jdk:1.3.1_13:::::::* cpe:2.3:a:sun:jdk:1.3.1_13::windows::::: cpe:2.3:a:sun:jdk:1.3.1_13::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_13::linux::::: cpe:2.3:a:sun:jdk:1.3.1_12:::::::* cpe:2.3:a:sun:jdk:1.3.1_12::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_12::windows::::: cpe:2.3:a:sun:jdk:1.3.1_12::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11:::::::* cpe:2.3:a:sun:jdk:1.3.1_11::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11::windows::::: cpe:2.3:a:sun:jdk:1.3.1_11::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10:::::::* cpe:2.3:a:sun:jdk:1.3.1_10::linux::::: cpe:2.3:a:sun:jdk:1.3.1_10::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10::windows::::: cpe:2.3:a:sun:jdk:1.3.1_09:::::::* cpe:2.3:a:sun:jdk:1.3.1_09::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_09::linux::::: cpe:2.3:a:sun:jdk:1.3.1_09::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08:::::::* cpe:2.3:a:sun:jdk:1.3.1_08::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_08::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08::linux::::: cpe:2.3:a:sun:jdk:1.3.1_07:::::::* cpe:2.3:a:sun:jdk:1.3.1_07::windows::::: cpe:2.3:a:sun:jdk:1.3.1_07::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_07::linux::::: cpe:2.3:a:sun:jdk:1.3.1_06:::::::* cpe:2.3:a:sun:jdk:1.3.1_06::windows::::: cpe:2.3:a:sun:jdk:1.3.1_06::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_06::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05:::::::* cpe:2.3:a:sun:jdk:1.3.1_05::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05::windows::::: cpe:2.3:a:sun:jdk:1.3.1_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_04:::::::* cpe:2.3:a:sun:jdk:1.3.1_04::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03:::::::* cpe:2.3:a:sun:jdk:1.3.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_03::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02:::::::* cpe:2.3:a:sun:jdk:1.3.1_02::windows::::: cpe:2.3:a:sun:jdk:1.3.1_02::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_01a:::::::* cpe:2.3:a:sun:jdk:1.3.1_01a::windows::::: cpe:2.3:a:sun:jdk:1.3.1_01:::::::* cpe:2.3:a:sun:jdk:1.3.1_01::linux::::: cpe:2.3:a:sun:jdk:1.3.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.3.1:update19:::::: cpe:2.3:a:sun:jdk:1.3.1:update20:::::: cpe:2.3:a:sun:jdk:1.3.1:-:::::: cpe:2.3:a:sun:jdk:1.3.0_05:::::::* cpe:2.3:a:sun:jdk:1.3.0_05::linux::::: cpe:2.3:a:sun:jdk:1.3.0_05::windows::::: cpe:2.3:a:sun:jdk:1.3.0_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_04:::::::* cpe:2.3:a:sun:jdk:1.3.0_03:::::::* cpe:2.3:a:sun:jdk:1.3.0_02:::::::* cpe:2.3:a:sun:jdk:1.3.0_02::windows::::: cpe:2.3:a:sun:jdk:1.3.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_02::linux::::: cpe:2.3:a:sun:jdk:1.3.0_01:::::::* cpe:2.3:a:sun:jdk:1.3.0:::::::* cpe:2.3:a:sun:jdk:1.3_05::solaris::::: cpe:2.3:a:sun:jdk:1.3_02::solaris::::: cpe:2.3:a:sun:jdk:1.3::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_12::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::linux::::: cpe:2.3:a:sun:jdk:1.2.2_11::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::windows::::: cpe:2.3:a:sun:jdk:1.2.2_10::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07a::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_07::windows::::: cpe:2.3:a:sun:jdk:1.2.2_07::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07::solaris::::: cpe:2.3:a:sun:jdk:1.2.2:update4:::::: cpe:2.3:a:sun:jdk:1.2.2:update5:::::: cpe:2.3:a:sun:jdk:1.2.2::solaris::::: cpe:2.3:a:sun:jdk:1.2.1:update3:::::: cpe:2.3:a:sun:jdk:1.2.1:-:::::: cpe:2.3:a:sun:jdk:1.2.0:::::::* cpe:2.3:a:sun:jdk:1.1.8:update13:::::: cpe:2.3:a:sun:jdk:1.1.8:update14:::::: cpe:2.3:a:sun:jdk:1.1.8:update2:::::: cpe:2.3:a:sun:jdk:1.1.8:update8:::::: cpe:2.3:a:sun:jdk:1.1.8:update10:::::: cpe:2.3:a:sun:jdk:1.1.8:update7:::::: cpe:2.3:a:sun:jdk:1.1.7b:update5:::::: cpe:2.3:a:sun:jdk:1.1.7b:-:::::: cpe:2.3:a:sun:jdk:1.1.6:update7:::::: cpe:2.3:a:sun:jdk:1.1.6:-:::::: cpe:2.3:a:sun:jdk:1.1.0:::::::*	272
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_21:::::::* cpe:2.3:a:sun:jre:1.4.2_20:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_19:::::::* cpe:2.3:a:sun:jre:1.4.2_18:::::::* cpe:2.3:a:sun:jre:1.4.2_17:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2_09:::::::* cpe:2.3:a:sun:jre:1.4.2_08:::::::* cpe:2.3:a:sun:jre:1.4.2_07:::::::* cpe:2.3:a:sun:jre:1.4.2_06:::::::* cpe:2.3:a:sun:jre:1.4.2_05:::::::* cpe:2.3:a:sun:jre:1.4.2_04:::::::* cpe:2.3:a:sun:jre:1.4.2_03:::::::* cpe:2.3:a:sun:jre:1.4.2_02:::::::* cpe:2.3:a:sun:jre:1.4.2_01:::::::* cpe:2.3:a:sun:jre:1.4.2:-:::::: cpe:2.3:a:sun:jre:1.4.2:update1:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:linux:::::* cpe:2.3:a:sun:jre:1.4.2::solaris::::: cpe:2.3:a:sun:jre:1.4.2:update2:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update4:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update2:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update5:windows:::::* cpe:2.3:a:sun:jre:1.4.2::linux::::: cpe:2.3:a:sun:jre:1.4.2:update5:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update2:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.2::windows::::: cpe:2.3:a:sun:jre:1.4.2:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update5:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update20:::::: cpe:2.3:a:sun:jre:1.4.2:update17:::::: cpe:2.3:a:sun:jre:1.4.2:update19:::::: cpe:2.3:a:sun:jre:1.4.2:update18:::::: cpe:2.3:a:sun:jre:1.4.2:update16:::::: cpe:2.3:a:sun:jre:1.4.2:update28:::::: cpe:2.3:a:sun:jre:1.4.1_07::windows::::: cpe:2.3:a:sun:jre:1.4.1_07::solaris::::: cpe:2.3:a:sun:jre:1.4.1_07::linux::::: cpe:2.3:a:sun:jre:1.4.1_07:::::::* cpe:2.3:a:sun:jre:1.4.1_06::solaris::::: cpe:2.3:a:sun:jre:1.4.1_06:::::::* cpe:2.3:a:sun:jre:1.4.1_06::linux::::: cpe:2.3:a:sun:jre:1.4.1_06::windows::::: cpe:2.3:a:sun:jre:1.4.1_05::linux::::: cpe:2.3:a:sun:jre:1.4.1_05::windows::::: cpe:2.3:a:sun:jre:1.4.1_05:::::::* cpe:2.3:a:sun:jre:1.4.1_05::solaris::::: cpe:2.3:a:sun:jre:1.4.1_04:::::::* cpe:2.3:a:sun:jre:1.4.1_04::windows::::: cpe:2.3:a:sun:jre:1.4.1_04::linux::::: cpe:2.3:a:sun:jre:1.4.1_04::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03:::::::* cpe:2.3:a:sun:jre:1.4.1_03::windows::::: cpe:2.3:a:sun:jre:1.4.1_03::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::solaris::::: cpe:2.3:a:sun:jre:1.4.1_02::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::windows::::: cpe:2.3:a:sun:jre:1.4.1_02:::::::* cpe:2.3:a:sun:jre:1.4.1_01::solaris::::: cpe:2.3:a:sun:jre:1.4.1_01::windows::::: cpe:2.3:a:sun:jre:1.4.1_01::linux::::: cpe:2.3:a:sun:jre:1.4.1_01:::::::* cpe:2.3:a:sun:jre:1.4.1:update3:::::: cpe:2.3:a:sun:jre:1.4.1::linux::::: cpe:2.3:a:sun:jre:1.4.1:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.1:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.1::windows::::: cpe:2.3:a:sun:jre:1.4.1::solaris::::: cpe:2.3:a:sun:jre:1.4.1:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.1:update2:::::: cpe:2.3:a:sun:jre:1.4.1:update4:::::: cpe:2.3:a:sun:jre:1.4.1:update1:::::: cpe:2.3:a:sun:jre:1.4.1:update7:::::: cpe:2.3:a:sun:jre:1.4.1:update6:::::: cpe:2.3:a:sun:jre:1.4.1:update5:::::: cpe:2.3:a:sun:jre:1.4.1:-:::::: cpe:2.3:a:sun:jre:1.4.0_04::solaris::::: cpe:2.3:a:sun:jre:1.4.0_04::windows::::: cpe:2.3:a:sun:jre:1.4.0_04::linux::::: cpe:2.3:a:sun:jre:1.4.0_04:::::::* cpe:2.3:a:sun:jre:1.4.0_03::solaris::::: cpe:2.3:a:sun:jre:1.4.0_03::linux::::: cpe:2.3:a:sun:jre:1.4.0_03::windows::::: cpe:2.3:a:sun:jre:1.4.0_03:::::::* cpe:2.3:a:sun:jre:1.4.0_02::linux::::: cpe:2.3:a:sun:jre:1.4.0_02::windows::::: cpe:2.3:a:sun:jre:1.4.0_02::solaris::::: cpe:2.3:a:sun:jre:1.4.0_02:::::::* cpe:2.3:a:sun:jre:1.4.0_01::solaris::::: cpe:2.3:a:sun:jre:1.4.0_01::windows::::: cpe:2.3:a:sun:jre:1.4.0_01::linux::::: cpe:2.3:a:sun:jre:1.4.0_01:::::::* cpe:2.3:a:sun:jre:1.4.0:::::::* cpe:2.3:a:sun:jre:1.4:::::::* cpe:2.3:a:sun:jre:1.4::linux::::: cpe:2.3:a:sun:jre:1.4::solaris::::: cpe:2.3:a:sun:jre:1.4::windows::::: cpe:2.3:a:sun:jre:1.3.1_9:::::::* cpe:2.3:a:sun:jre:1.3.1_8:::::::* cpe:2.3:a:sun:jre:1.3.1_7:::::::* cpe:2.3:a:sun:jre:1.3.1_6:::::::* cpe:2.3:a:sun:jre:1.3.1_5:::::::* cpe:2.3:a:sun:jre:1.3.1_4:::::::* cpe:2.3:a:sun:jre:1.3.1_3:::::::* cpe:2.3:a:sun:jre:1.3.1_28:::::::* cpe:2.3:a:sun:jre:1.3.1_27:::::::* cpe:2.3:a:sun:jre:1.3.1_26:::::::* cpe:2.3:a:sun:jre:1.3.1_25:::::::* cpe:2.3:a:sun:jre:1.3.1_24:::::::* cpe:2.3:a:sun:jre:1.3.1_23:::::::* cpe:2.3:a:sun:jre:1.3.1_22:::::::* cpe:2.3:a:sun:jre:1.3.1_21:::::::* cpe:2.3:a:sun:jre:1.3.1_20:::::::* cpe:2.3:a:sun:jre:1.3.1_2:::::::* cpe:2.3:a:sun:jre:1.3.1_19:::::::* cpe:2.3:a:sun:jre:1.3.1_18:::::::* cpe:2.3:a:sun:jre:1.3.1_17:::::::* cpe:2.3:a:sun:jre:1.3.1_16:::::::* cpe:2.3:a:sun:jre:1.3.1_15:::::::* cpe:2.3:a:sun:jre:1.3.1_14:::::::* cpe:2.3:a:sun:jre:1.3.1_13:::::::* cpe:2.3:a:sun:jre:1.3.1_12:::::::* cpe:2.3:a:sun:jre:1.3.1_11:::::::* cpe:2.3:a:sun:jre:1.3.1_10:::::::* cpe:2.3:a:sun:jre:1.3.1_1:::::::* cpe:2.3:a:sun:jre:1.3.1_09:::::::* cpe:2.3:a:sun:jre:1.3.1_09::linux::::: cpe:2.3:a:sun:jre:1.3.1_09::solaris::::: cpe:2.3:a:sun:jre:1.3.1_09::windows::::: cpe:2.3:a:sun:jre:1.3.1_08:::::::* cpe:2.3:a:sun:jre:1.3.1_07:::::::* cpe:2.3:a:sun:jre:1.3.1_07::solaris::::: cpe:2.3:a:sun:jre:1.3.1_07::linux::::: cpe:2.3:a:sun:jre:1.3.1_07::windows::::: cpe:2.3:a:sun:jre:1.3.1_06:::::::* cpe:2.3:a:sun:jre:1.3.1_06::solaris::::: cpe:2.3:a:sun:jre:1.3.1_06::linux::::: cpe:2.3:a:sun:jre:1.3.1_06::windows::::: cpe:2.3:a:sun:jre:1.3.1_05:::::::* cpe:2.3:a:sun:jre:1.3.1_05::linux::::: cpe:2.3:a:sun:jre:1.3.1_05::windows::::: cpe:2.3:a:sun:jre:1.3.1_05::solaris::::: cpe:2.3:a:sun:jre:1.3.1_04:::::::* cpe:2.3:a:sun:jre:1.3.1_03:::::::* cpe:2.3:a:sun:jre:1.3.1_03::windows::::: cpe:2.3:a:sun:jre:1.3.1_03::solaris::::: cpe:2.3:a:sun:jre:1.3.1_03::linux::::: cpe:2.3:a:sun:jre:1.3.1_02::solaris::::: cpe:2.3:a:sun:jre:1.3.1_02::windows::::: cpe:2.3:a:sun:jre:1.3.1_02::linux::::: cpe:2.3:a:sun:jre:1.3.1_02:::::::* cpe:2.3:a:sun:jre:1.3.1_01a:::::::* cpe:2.3:a:sun:jre:1.3.1_01:::::::* cpe:2.3:a:sun:jre:1.3.1:update1:::::: cpe:2.3:a:sun:jre:1.3.1:update16:::::: cpe:2.3:a:sun:jre:1.3.1:update18:::::: cpe:2.3:a:sun:jre:1.3.1:update20:::::: cpe:2.3:a:sun:jre:1.3.1:update19:::::: cpe:2.3:a:sun:jre:1.3.1:update1a:::::: cpe:2.3:a:sun:jre:1.3.1:-:::::: cpe:2.3:a:sun:jre:1.3.1:update2:::::: cpe:2.3:a:sun:jre:1.3.1:update8:::::: cpe:2.3:a:sun:jre:1.3.1:update15:::::: cpe:2.3:a:sun:jre:1.3.1:update4:::::: cpe:2.3:a:sun:jre:1.3.1:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.1::linux::::: cpe:2.3:a:sun:jre:1.3.1:update8:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update1a:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update4:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update12:::::: cpe:2.3:a:sun:jre:1.3.1:update17:::::: cpe:2.3:a:sun:jre:1.3.0:update5:::::: cpe:2.3:a:sun:jre:1.3.0:-:::::: cpe:2.3:a:sun:jre:1.3.0:update4:::::: cpe:2.3:a:sun:jre:1.3.0:update1:::::: cpe:2.3:a:sun:jre:1.3.0:update3:::::: cpe:2.3:a:sun:jre:1.3.0:update2:::::: cpe:2.3:a:sun:jre:1.3.0:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update5:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update5:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update3:linux:::::* cpe:2.3:a:sun:jre:1.3.0::windows::::: cpe:2.3:a:sun:jre:1.3.0:update4:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update2:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.0::linux::::: cpe:2.3:a:sun:jre:1.3.0:update5:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update2:linux:::::* cpe:2.3:a:sun:jre:1.3.0::solaris::::: cpe:2.3:a:sun:jre:1.3.0:update2:windows:::::* cpe:2.3:a:sun:jre:1.2.2_07::solaris::::: cpe:2.3:a:sun:jre:1.2.2_012::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::linux::::: cpe:2.3:a:sun:jre:1.2.2_011::windows::::: cpe:2.3:a:sun:jre:1.2.2_007::linux::::: cpe:2.3:a:sun:jre:1.2.2_007::solaris::::: cpe:2.3:a:sun:jre:1.2.2_007::windows::::: cpe:2.3:a:sun:jre:1.2.2_006::linux::::: cpe:2.3:a:sun:jre:1.2.2_005::linux::::: cpe:2.3:a:sun:jre:1.2.2_004::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux_production::::: cpe:2.3:a:sun:jre:1.2.2::solaris::::: cpe:2.3:a:sun:jre:1.2.2:update10:linux:::::* cpe:2.3:a:sun:jre:1.2.2:update10:solaris:::::* cpe:2.3:a:sun:jre:1.2.2::windows::::: cpe:2.3:a:sun:jre:1.2.2:update10:windows:::::* cpe:2.3:a:sun:jre:1.2.2::linux_production::::: cpe:2.3:a:sun:jre:1.2.2:update10:::::: cpe:2.3:a:sun:jre:1.2:::::::* cpe:2.3:a:sun:jre:1.1.8:update13:::::: cpe:2.3:a:sun:jre:1.1.8:update7:::::: cpe:2.3:a:sun:jre:1.1.8:update8:::::: cpe:2.3:a:sun:jre:1.1.8:update14:::::: cpe:2.3:a:sun:jre:1.1:::::::*	258
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2_09:::::::* cpe:2.3:a:sun:sdk:1.4.2_08:::::::* cpe:2.3:a:sun:sdk:1.4.2_07:::::::* cpe:2.3:a:sun:sdk:1.4.2_06:::::::* cpe:2.3:a:sun:sdk:1.4.2_05:::::::* cpe:2.3:a:sun:sdk:1.4.2_04:::::::* cpe:2.3:a:sun:sdk:1.4.2_03:::::::* cpe:2.3:a:sun:sdk:1.4.2_02:::::::* cpe:2.3:a:sun:sdk:1.4.2_01:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::* cpe:2.3:a:sun:sdk:1.4.1_07:::::::* cpe:2.3:a:sun:sdk:1.4.1_06:::::::* cpe:2.3:a:sun:sdk:1.4.1_05:::::::* cpe:2.3:a:sun:sdk:1.4.1_04:::::::* cpe:2.3:a:sun:sdk:1.4.1_03:::::::* cpe:2.3:a:sun:sdk:1.4.1_02:::::::* cpe:2.3:a:sun:sdk:1.4.1_01:::::::* cpe:2.3:a:sun:sdk:1.4.1:::::::* cpe:2.3:a:sun:sdk:1.4.0_04:::::::* cpe:2.3:a:sun:sdk:1.4.0_03:::::::* cpe:2.3:a:sun:sdk:1.4.0_02:::::::* cpe:2.3:a:sun:sdk:1.4.0_01:::::::* cpe:2.3:a:sun:sdk:1.4.0:::::::* cpe:2.3:a:sun:sdk:1.4:::::::* cpe:2.3:a:sun:sdk:1.3.1_9:::::::* cpe:2.3:a:sun:sdk:1.3.1_8:::::::* cpe:2.3:a:sun:sdk:1.3.1_7:::::::* cpe:2.3:a:sun:sdk:1.3.1_6:::::::* cpe:2.3:a:sun:sdk:1.3.1_5:::::::* cpe:2.3:a:sun:sdk:1.3.1_4:::::::* cpe:2.3:a:sun:sdk:1.3.1_3:::::::* cpe:2.3:a:sun:sdk:1.3.1_28:::::::* cpe:2.3:a:sun:sdk:1.3.1_27:::::::* cpe:2.3:a:sun:sdk:1.3.1_26:::::::* cpe:2.3:a:sun:sdk:1.3.1_25:::::::* cpe:2.3:a:sun:sdk:1.3.1_24:::::::* cpe:2.3:a:sun:sdk:1.3.1_23:::::::* cpe:2.3:a:sun:sdk:1.3.1_22:::::::* cpe:2.3:a:sun:sdk:1.3.1_21:::::::* cpe:2.3:a:sun:sdk:1.3.1_20:::::::* cpe:2.3:a:sun:sdk:1.3.1_2:::::::* cpe:2.3:a:sun:sdk:1.3.1_19:::::::* cpe:2.3:a:sun:sdk:1.3.1_18:::::::* cpe:2.3:a:sun:sdk:1.3.1_17:::::::* cpe:2.3:a:sun:sdk:1.3.1_16:::::::* cpe:2.3:a:sun:sdk:1.3.1_15:::::::* cpe:2.3:a:sun:sdk:1.3.1_14:::::::* cpe:2.3:a:sun:sdk:1.3.1_13:::::::* cpe:2.3:a:sun:sdk:1.3.1_12:::::::* cpe:2.3:a:sun:sdk:1.3.1_11:::::::* cpe:2.3:a:sun:sdk:1.3.1_10:::::::* cpe:2.3:a:sun:sdk:1.3.1_1:::::::* cpe:2.3:a:sun:sdk:1.3.1_09:::::::* cpe:2.3:a:sun:sdk:1.3.1_08:::::::* cpe:2.3:a:sun:sdk:1.3.1_07:::::::* cpe:2.3:a:sun:sdk:1.3.1_06:::::::* cpe:2.3:a:sun:sdk:1.3.1_05:::::::* cpe:2.3:a:sun:sdk:1.3.1_04:::::::* cpe:2.3:a:sun:sdk:1.3.1_03:::::::* cpe:2.3:a:sun:sdk:1.3.1_02:::::::* cpe:2.3:a:sun:sdk:1.3.1_01a:::::::* cpe:2.3:a:sun:sdk:1.3.1_01:::::::* cpe:2.3:a:sun:sdk:1.3.1:::::::* cpe:2.3:a:sun:sdk:1.3.0_05:::::::* cpe:2.3:a:sun:sdk:1.3.0_04:::::::* cpe:2.3:a:sun:sdk:1.3.0_03:::::::* cpe:2.3:a:sun:sdk:1.3.0_02:::::::* cpe:2.3:a:sun:sdk:1.3.0_01:::::::* cpe:2.3:a:sun:sdk:1.3.0:::::::* cpe:2.3:a:sun:sdk:1.3.0::standard::::: cpe:2.3:a:sun:sdk:1.3_05:::::::* cpe:2.3:a:sun:sdk:1.3_02:::::::* cpe:2.3:a:sun:sdk:1.2.2_10:::::::* cpe:2.3:a:sun:sdk:1.2.2_010:::::::* cpe:2.3:a:sun:sdk:1.1.8_007:::::::* cpe:2.3:a:sun:sdk:1.1.3:::::::*	91

OpenVAS Exploits

Date	Description
2009-10-13	Name : SLES10: Security update for IBM Java 1.5.0 File : nvt/sles10_java-1_5_0-ibm4.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.4.2 File : nvt/sles10_java-1_4_2-ibm3.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.4.2 File : nvt/sles10_java-1_4_2-ibm1.nasl
2009-10-10	Name : SLES9: Security update for IBM Java2 JRE and SDK File : nvt/sles9p5033560.nasl
2009-10-10	Name : SLES9: Security update for IBM Java 2 JRE and SDK File : nvt/sles9p5023603.nasl
2009-10-10	Name : SLES9: Security update for IBM Java 5 and JRE File : nvt/sles9p5023460.nasl
2009-10-10	Name : SLES9: Security update for IBMJava5-JRE,IBMJava5-SDK File : nvt/sles9p5021818.nasl
2009-10-10	Name : SLES9: Security update for Sun Java 2 File : nvt/sles9p5020427.nasl
2009-10-10	Name : SLES9: Security update for IBM Java2 JRE and SDK File : nvt/sles9p5015890.nasl
2009-10-10	Name : SLES9: Security update for Java 2 File : nvt/sles9p5015291.nasl
2009-06-05	Name : Ubuntu USN-723-1 (git-core) File : nvt/ubuntu_723_1.nasl
2009-05-05	Name : HP-UX Update for Java JRE and JDK HPSBUX02284 File : nvt/gb_hp_ux_HPSBUX02284.nasl
2009-03-06	Name : RedHat Update for IBMJava2 RHSA-2008:0133-01 File : nvt/gb_RHSA-2008_0133-01_IBMJava2.nasl
2009-01-28	Name : SuSE Update for IBM Java SUSE-SA:2007:056 File : nvt/gb_suse_2007_056.nasl
2009-01-28	Name : SuSE Update for Sun Java SUSE-SA:2007:055 File : nvt/gb_suse_2007_055.nasl
2009-01-28	Name : SuSE Update for IBM Java, Sun Java SUSE-SA:2007:045 File : nvt/gb_suse_2007_045.nasl
2009-01-23	Name : SuSE Update for IBMJava2,IBMJava5,java-1_4_2-ibm,java-1_5_0-ibm SUSE-SA:2008... File : nvt/gb_suse_2008_025.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200806-11 (ibm-jdk-bin ibm-jre-bin) File : nvt/glsa_200806_11.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-28 (jrockit-jdk-bin) File : nvt/glsa_200804_28.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-20 (sun-jdk, sun-jre-bin, emul-linux-x86... File : nvt/glsa_200804_20.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200709-15 (jrockit-jdk-bin) File : nvt/glsa_200709_15.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200706-08 (emul-linux-x86-java) File : nvt/glsa_200706_08.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200705-23 (sun-jdk,sun-jre-bin) File : nvt/glsa_200705_23.nasl
2008-09-04	Name : FreeBSD Ports: jdk File : nvt/freebsd_jdk1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
45527	Sun Java JDK / JRE Outbound Connection DNS Rebinding Security Bypass
37766	Sun Java JDK / JRE TrueType Font Parsing Memory Overwrite
37765	Sun Java JDK / JRE Applet Outbound DNS Rebinding Issue
37761	Sun Java JDK / JRE Local Drag-and-drop Operation Access Restriction Bypass
37760	Sun Java JDK / JRE Untrusted Applet Warning Banner Display Bypass
36663	Sun JDK / JDE Crafted SSL/TLS Handshake Request Remote DoS
36200	Sun Java JDK BMP Parsing Remote Privilege Escalation
36199	Sun Java JDK Embedded ICC Profile Image Parser Overflow

Snort® IPS/IDS

Date	Description
2014-01-10	Oracle JDK image parsing library ICC buffer overflow attempt RuleID : 17727 - Revision : 14 - Type : FILE-OTHER
2014-01-10	Sun JDK image parsing library ICC buffer overflow attempt RuleID : 15328 - Revision : 6 - Type : FILE-JAVA

Nessus® Vulnerability Scanner

Date	Description
2013-02-22	Name : The remote Unix host has an application that is affected by multiple vulnerab... File : sun_java_jre_103079_unix.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host has an application that is affected by a privilege escal... File : sun_java_jre_103024_unix.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host has an application that is affected by several vulnerabi... File : sun_java_jre_102934_unix.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-1086.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0818.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080114_jdk__java__on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20071128_jdk__java__on_SL5_x.nasl - Type : ACT_GATHER_INFO
2010-01-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0524.nasl - Type : ACT_GATHER_INFO
2010-01-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0261.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12210.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12142.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0132.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0100.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-1041.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0963.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0956.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0829.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0817.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0156.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2008-0002.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2008-0010.nasl - Type : ACT_GATHER_INFO
2009-06-15	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_38148.nasl - Type : ACT_GATHER_INFO
2009-06-15	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_38147.nasl - Type : ACT_GATHER_INFO
2008-11-25	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_38761.nasl - Type : ACT_GATHER_INFO
2008-08-22	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-5465.nasl - Type : ACT_GATHER_INFO
2008-06-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0133.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-5183.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-5182.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200804-20.nasl - Type : ACT_GATHER_INFO
2007-12-17	Name : The remote host is affected by multiple vulnerabilities. File : macosx_java_rel6.nasl - Type : ACT_GATHER_INFO
2007-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-4542.nasl - Type : ACT_GATHER_INFO
2007-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-4687.nasl - Type : ACT_GATHER_INFO
2007-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-4544.nasl - Type : ACT_GATHER_INFO
2007-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-sun-4533.nasl - Type : ACT_GATHER_INFO
2007-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-sun-3844.nasl - Type : ACT_GATHER_INFO
2007-11-20	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_37182.nasl - Type : ACT_GATHER_INFO
2007-11-20	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_37183.nasl - Type : ACT_GATHER_INFO
2007-11-20	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_37197.nasl - Type : ACT_GATHER_INFO
2007-10-18	Name : The remote openSUSE host is missing a security update. File : suse_java-1_4_2-sun-4536.nasl - Type : ACT_GATHER_INFO
2007-10-18	Name : The remote openSUSE host is missing a security update. File : suse_java-1_5_0-sun-4527.nasl - Type : ACT_GATHER_INFO
2007-10-18	Name : The remote openSUSE host is missing a security update. File : suse_java-1_6_0-sun-4525.nasl - Type : ACT_GATHER_INFO
2007-10-17	Name : The remote openSUSE host is missing a security update. File : suse_java-1_4_2-sun-3843.nasl - Type : ACT_GATHER_INFO
2007-10-17	Name : The remote openSUSE host is missing a security update. File : suse_java-1_5_0-sun-3832.nasl - Type : ACT_GATHER_INFO
2007-10-09	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_c93e4d4175c511dcb9030016179b2dd5.nasl - Type : ACT_GATHER_INFO
2007-10-05	Name : The remote Windows host has an application that is affected by multiple vulne... File : sun_java_jre_103079.nasl - Type : ACT_GATHER_INFO
2007-09-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200709-15.nasl - Type : ACT_GATHER_INFO
2007-08-17	Name : The remote Windows host has an application that is affected by a privilege es... File : sun_java_jre_103024.nasl - Type : ACT_GATHER_INFO
2007-06-27	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200706-08.nasl - Type : ACT_GATHER_INFO
2007-06-04	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200705-23.nasl - Type : ACT_GATHER_INFO
2007-06-02	Name : The remote Windows host has an application that is affected by several vulner... File : sun_java_jre_102934.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:51:24	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	3
Oval ID(s)	12
CPE ID(s)	621
osvdb(s)	8
Openvas Exploit(s)	24
Snort® Rule(s)	2
Nessus® Exploit(s)	50

	Related
9.3	CVE-2007-4381
7.8	CVE-2007-3698
6.8	CVE-2007-2788
5	CVE-2007-5240
4.3	CVE-2007-2789
4	CVE-2007-5239
4	CVE-2007-5232
2.6	CVE-2007-5273
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 8 more Alert(s)