CVE-2008-5358

Common Vulnerabilities and Exposures

CVE-2008-5358 at MITRE

Details

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.

Novell Bugzilla entries: 456770,471829,496004

SUSE Security Advisories:

SUSE-SA:2009:001, published Fri, 09 Jan 2009 15:00:00 +0000
SUSE-SA:2009:001 , published Fri, 09 Jan 2009 15:00:00 +0000
SUSE-SA:2009:018 , published Tue, 07 Apr 2009 13:00:00 +0000
SUSE-SR:2009:006, published Tue, 10 Mar 2009 15:00:00 +0000
SUSE-SR:2009:006 , published Tue, 10 Mar 2009 15:00:00 +0000

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP2 for x86	`java-1_4_2-sun >= 1.4.2.19-0.3` `java-1_4_2-sun-alsa >= 1.4.2.19-0.3` `java-1_4_2-sun-demo >= 1.4.2.19-0.3` `java-1_4_2-sun-devel >= 1.4.2.19-0.3` `java-1_4_2-sun-jdbc >= 1.4.2.19-0.3` `java-1_4_2-sun-plugin >= 1.4.2.19-0.3` `java-1_4_2-sun-src >= 1.4.2.19-0.3`	sled10-sp2. x86-64 sles10-sp2. ia64 sled10-sp2. x86 sles10-sp2. x86-64 sles10-sp2. x86 ZYPP Patch Nr: 5852
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for x86	`java-1_4_2-sun >= 1.4.2.19-0.3` `java-1_4_2-sun-alsa >= 1.4.2.19-0.3` `java-1_4_2-sun-devel >= 1.4.2.19-0.3` `java-1_4_2-sun-jdbc >= 1.4.2.19-0.3` `java-1_4_2-sun-plugin >= 1.4.2.19-0.3`	sled10-sp2. x86-64 sles10-sp2. ia64 sled10-sp2. x86 sles10-sp2. x86-64 sles10-sp2. x86 ZYPP Patch Nr: 5852
SUSE Linux Enterprise Server 10 SP2 for IPF	`java-1_4_2-sun >= 1.4.2.19-0.3` `java-1_4_2-sun-devel >= 1.4.2.19-0.3` `java-1_4_2-sun-jdbc >= 1.4.2.19-0.3` `java-1_4_2-sun-plugin >= 1.4.2.19-0.3`	sled10-sp2. x86-64 sles10-sp2. ia64 sled10-sp2. x86 sles10-sp2. x86-64 sles10-sp2. x86 ZYPP Patch Nr: 5852
SLE 11	`java-1_6_0-ibm >= 1.6.0-124.6.1` `java-1_6_0-ibm-devel >= 1.6.0-124.6.1` `java-1_6_0-ibm-fonts >= 1.6.0-124.6.1`	sle11. s390x sle11. x86-64 sle11. x86 sle11. x86-64 sle11. ppc sle11. x86 sle11. ppc sle11. s390x SAT Patch Nr: 736
SLE 11	`java-1_6_0-ibm-devel >= 1.6.0-124.6.1`	sle11. s390x sle11. x86-64 sle11. x86 sle11. x86-64 sle11. ppc sle11. x86 sle11. ppc sle11. s390x SAT Patch Nr: 736
SLES 11	`java-1_6_0-ibm >= 1.6.0-124.6.1` `java-1_6_0-ibm-alsa >= 1.6.0-124.6.1` `java-1_6_0-ibm-fonts >= 1.6.0-124.6.1` `java-1_6_0-ibm-jdbc >= 1.6.0-124.6.1` `java-1_6_0-ibm-plugin >= 1.6.0-124.6.1`	sle11. s390x sle11. x86-64 sle11. x86 sle11. x86-64 sle11. ppc sle11. x86 sle11. ppc sle11. s390x SAT Patch Nr: 736
SLES 11	`java-1_6_0-ibm >= 1.6.0-124.6.1` `java-1_6_0-ibm-fonts >= 1.6.0-124.6.1` `java-1_6_0-ibm-jdbc >= 1.6.0-124.6.1`	sle11. s390x sle11. x86-64 sle11. x86 sle11. x86-64 sle11. ppc sle11. x86 sle11. ppc sle11. s390x SAT Patch Nr: 736
openSUSE 10.3 openSUSE 11.0	`java-1_5_0-sun >= 1.5.0_update17-0.1` `java-1_5_0-sun-alsa >= 1.5.0_update17-0.1` `java-1_5_0-sun-demo >= 1.5.0_update17-0.1` `java-1_5_0-sun-devel >= 1.5.0_update17-0.1` `java-1_5_0-sun-jdbc >= 1.5.0_update17-0.1` `java-1_5_0-sun-plugin >= 1.5.0_update17-0.1` `java-1_5_0-sun-src >= 1.5.0_update17-0.1`	ZYPP Patch Nr: 5875 SAT Patch Nr: 375
openSUSE 11.1	`java-1_5_0-sun >= 1.5.0_update17-1.1` `java-1_5_0-sun-alsa >= 1.5.0_update17-1.1` `java-1_5_0-sun-devel >= 1.5.0_update17-1.1` `java-1_5_0-sun-jdbc >= 1.5.0_update17-1.1` `java-1_5_0-sun-plugin >= 1.5.0_update17-1.1`	ZYPP Patch Nr: 5875 SAT Patch Nr: 375
openSUSE 11.0	`java-1_6_0-openjdk-debuginfo >= 1.4_b14-24.2` `java-1_6_0-openjdk-debugsource >= 1.4_b14-24.2`	SAT Patch Nr: 578
openSUSE 11.0	`java-1_6_0-openjdk >= 1.4_b14-24.2` `java-1_6_0-openjdk-demo >= 1.4_b14-24.2` `java-1_6_0-openjdk-devel >= 1.4_b14-24.2` `java-1_6_0-openjdk-javadoc >= 1.4_b14-24.2` `java-1_6_0-openjdk-plugin >= 1.4_b14-24.2` `java-1_6_0-openjdk-src >= 1.4_b14-24.2`	SAT Patch Nr: 578
openSUSE 11.1	`java-1_6_0-openjdk-debuginfo >= 1.4_b14-24.2.1` `java-1_6_0-openjdk-debugsource >= 1.4_b14-24.2.1`	SAT Patch Nr: 578
openSUSE 11.1	`java-1_6_0-openjdk >= 1.4_b14-24.2.1` `java-1_6_0-openjdk-demo >= 1.4_b14-24.2.1` `java-1_6_0-openjdk-devel >= 1.4_b14-24.2.1` `java-1_6_0-openjdk-javadoc >= 1.4_b14-24.2.1` `java-1_6_0-openjdk-plugin >= 1.4_b14-24.2.1` `java-1_6_0-openjdk-src >= 1.4_b14-24.2.1`	SAT Patch Nr: 578
openSUSE 10.3	`java-1_6_0-sun >= 1.6.0.u11-0.1` `java-1_6_0-sun-alsa >= 1.6.0.u11-0.1` `java-1_6_0-sun-debuginfo >= 1.6.0.u11-0.1` `java-1_6_0-sun-demo >= 1.6.0.u11-0.1` `java-1_6_0-sun-devel >= 1.6.0.u11-0.1` `java-1_6_0-sun-jdbc >= 1.6.0.u11-0.1` `java-1_6_0-sun-plugin >= 1.6.0.u11-0.1`	ZYPP Patch Nr: 5876 SAT Patch Nr: 376
openSUSE 11.0	`java-1_6_0-sun >= 1.6.0.u11-0.1` `java-1_6_0-sun-alsa >= 1.6.0.u11-0.1` `java-1_6_0-sun-demo >= 1.6.0.u11-0.1` `java-1_6_0-sun-devel >= 1.6.0.u11-0.1` `java-1_6_0-sun-jdbc >= 1.6.0.u11-0.1` `java-1_6_0-sun-plugin >= 1.6.0.u11-0.1`	ZYPP Patch Nr: 5876 SAT Patch Nr: 376
openSUSE 11.1	`java-1_6_0-sun >= 1.6.0.u11-1.1` `java-1_6_0-sun-alsa >= 1.6.0.u11-1.1` `java-1_6_0-sun-devel >= 1.6.0.u11-1.1` `java-1_6_0-sun-jdbc >= 1.6.0.u11-1.1` `java-1_6_0-sun-plugin >= 1.6.0.u11-1.1`	ZYPP Patch Nr: 5876 SAT Patch Nr: 376
Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 Novell Linux POS 9 Open Enterprise Server SUSE CORE 9 for AMD64 and Intel EM64T SUSE CORE 9 for Itanium Processor Family SUSE CORE 9 for x86	`java2 >= 1.4.2-129.48` `java2-jre >= 1.4.2-129.48`	sles9-nlpos. x86 core9. x86-64 core9. x86 sles9-nld. x86 sles9-nld. x86-64 sles9-oes. x86 core9. ia64 YOU Patch Nr: 12321