SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12210)
Medium Nessus Plugin ID 41226
SynopsisThe remote SuSE 9 host is missing a security-related patch.
DescriptionThis update of IBM Java to 1.4.2 SR11 fixes various security problems :
- Stack-based buffer overflow in Java Web Start (javaws.exe) allows remote attackers to execute arbitrary code via a crafted JNLP file. (CVE-2008-1196)
- Unspecified vulnerability in the Java Runtime Environment (JRE) allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms. (CVE-2008-1187)
- Visual truncation vulnerability in the Java Runtime Environment allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.
SolutionApply YOU patch number 12210.