SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 5465)
Medium Nessus Plugin ID 34024
SynopsisThe remote SuSE 10 host is missing a security-related patch.
DescriptionThis update of IBM Java to 1.4.2 SR11 fixes various security problems :
- Stack-based buffer overflow in Java Web Start (javaws.exe) allows remote attackers to execute arbitrary code via a crafted JNLP file. (CVE-2008-1196)
- Unspecified vulnerability in the Java Runtime Environment (JRE) allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms. (CVE-2008-1187)
- Visual truncation vulnerability in the Java Runtime Environment allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.
SolutionApply ZYPP patch number 5465.