oval:org.mitre.oval:def:15238
Definition Id: oval:org.mitre.oval:def:15238 | |||
Oval ID: | oval:org.mitre.oval:def:15238 | ||
Title: | DSA-2311-1 openjdk-6 -- several | ||
Description: | Several vulnerabilities have been discovered in OpenJDK, an implementation of the Java SE platform. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-0862 Integer overflow errors in the JPEG and font parser allow untrusted code to elevate its privileges. CVE-2011-0864 Hotspot, the just-in-time compiler in OpenJDK, mishandled certain byte code instructions, allowing untrusted code to crash the virtual machine. CVE-2011-0865 A race condition in signed object deserialization could allow untrusted code to modify signed content, apparently leaving its signature intact. CVE-2011-0867 Untrusted code could access information about network interfaces which was not intended to be public. CVE-2011-0868 A float-to-long conversion could overflow, allowing untrusted code to crash the virtual machine. CVE-2011-0869 Untrusted code could intercept HTTP requests by reconfiguring proxy settings through a SOAP connection. CVE-2011-0871 Untrusted code could elevate its privileges through the Swing MediaTracker code. In addition, this update removes support for the Zero/Shark and Cacao Hotspot variants from the i386 and amd64 due to stability issues. These Hotspot variants are included in the openjdk-6-jre-zero and icedtea-6-jre-cacao packages, and these packages must be removed during this update. | ||
Family: | unix | Class: | patch |
Reference(s): | DSA-2311-1 CVE-2011-0862 CVE-2011-0864 CVE-2011-0865 CVE-2011-0867 CVE-2011-0868 CVE-2011-0869 CVE-2011-0871 | Version: | 5 |
Platform(s): | Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | openjdk-6 |
Definition Synopsis: | |||
Definition Id: oval:org.mitre.oval:def:12959 | |||
Oval ID: | oval:org.mitre.oval:def:12959 | ||
Title: | Debian 6.0 is installed | ||
Description: | Debian 6.0 (squeeze) is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian:6.0 | Version: | 6 |
Platform(s): | Debian 6.0 | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:15238 |
Definition Id: oval:org.mitre.oval:def:24698 | |||
Oval ID: | oval:org.mitre.oval:def:24698 | ||
Title: | Debian GNU/kFreeBSD is installed | ||
Description: | Debian GNU/kFreeBSD is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian_gnu/kfreebsd | Version: | 3 |
Platform(s): | Debian GNU/kFreeBSD | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:15238 |
Definition Id: oval:org.mitre.oval:def:24894 | |||
Oval ID: | oval:org.mitre.oval:def:24894 | ||
Title: | Debian GNU/Linux is installed | ||
Description: | Debian GNU/Linux is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian_gnu/linux | Version: | 3 |
Platform(s): | Debian GNU/Linux | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:15238 |