Detections
Analytics
Sun Java JRE Image Parsing Vulnerabilities (102934) (Unix)
medium Nessus Plugin ID 64821
Language:
Synopsis
The remote Unix host has an application that is affected by several vulnerabilities.Description
According to its version number, the Sun Java Runtime Environment (JRE) installed on the remote host reportedly is affected by a buffer overflow in its image processing code as well as another issue that may cause the Java Virtual Machine to hang.Solution
Update to Sun Java JDK and JRE 6 Update 1 / JDK and JRE 5.0 Update 11 / SDK and JRE 1.3.1_20 or later and remove, if necessary, any affected versions.See Also
Plugin Details
Severity: Medium
ID: 64821
File Name: sun_java_jre_102934_unix.nasl
Version: 1.9
Type: local
Agent: unix
Family: Misc.
Published: 2/22/2013
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.1
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2007-2788
Vulnerability Information
CPE: cpe:/a:oracle:jre
Required KB Items: Host/Java/JRE/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/29/2007
Vulnerability Publication Date: 5/16/2007
Reference Information
CVE: CVE-2007-2788, CVE-2007-2789
BID: 24004