Java Runtime Environment

DATE	CVE	VULNERABILITY TITLE	RISK
2009-03-25	CVE-2009-1099	Numeric Errors vulnerability in SUN Java Runtime Environment and Java SE Development KIT Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow. network low complexity sun CWE-189	7.5