Vulnerabilities > SUN > SDK > 1.3.1.24

DATE CVE VULNERABILITY TITLE RISK
2010-04-01 CVE-2010-0089 Remote Java Web Start vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
network
low complexity
sun
5.0
2010-04-01 CVE-2010-0088 Remote Java Runtime Environme vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0085.
network
sun
6.8
2010-04-01 CVE-2010-0087 Remote vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
network
low complexity
sun
7.5
2010-04-01 CVE-2010-0085 Remote Java Runtime Environment vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0088.
network
high complexity
sun
5.1
2010-04-01 CVE-2010-0084 Remote vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091.
network
low complexity
sun
5.0
2010-04-01 CVE-2010-0082 HotSpot Server Remote vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
network
high complexity
sun
5.1
2009-11-05 CVE-2009-3877 Resource Management Errors vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
network
low complexity
sun linux microsoft CWE-399
5.0
2009-11-05 CVE-2009-3876 Resource Management Errors vulnerability in SUN Jdk, JRE and SDK
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
network
low complexity
sun linux microsoft CWE-399
5.0
2009-11-05 CVE-2009-3875 Cryptographic Issues vulnerability in SUN Jdk, JRE and SDK
The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.
network
low complexity
sun linux microsoft CWE-310
5.0
2009-11-05 CVE-2009-3874 Numeric Errors vulnerability in SUN Jdk, JRE and SDK
Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.
network
sun microsoft CWE-189
critical
9.3