Upstream information
Description
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entries: 456770, 471829, 496004 SUSE Security Advisories:- SUSE-SA:2009:001, published Fri, 09 Jan 2009 15:00:00 +0000
- SUSE-SA:2009:018, published Tue, 07 Apr 2009 13:00:00 +0000
- SUSE-SR:2009:006, published Tue, 10 Mar 2009 15:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP2 for x86 |
| sled10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sles10-sp2.x86 ZYPP Patch Nr: 5852 |
| SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for x86 |
| sled10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sles10-sp2.x86 ZYPP Patch Nr: 5852 |
| SUSE Linux Enterprise Server 10 SP2 for IPF |
| sled10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sles10-sp2.x86 ZYPP Patch Nr: 5852 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12799 |
| openSUSE 10.3 |
| |
| openSUSE 10.3 |
| |
| Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 Novell Linux POS 9 Open Enterprise Server SUSE CORE 9 for AMD64 and Intel EM64T SUSE CORE 9 for Itanium Processor Family SUSE CORE 9 for x86 |
| sles9-nlpos.x86 core9.x86-64 core9.x86 sles9-nld.x86 sles9-nld.x86-64 sles9-oes.x86 core9.ia64 YOU Patch Nr: 12321 |