Upstream information
Description
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Novell/SUSE information
Novell Bugzilla entries: 528268, 537969, 548655 SUSE Security Advisories:- SUSE-SA:2009:043, published Fri, 07 Aug 2009 15:00:00 +0000
- SUSE-SA:2009:053, published Wed, 04 Nov 2009 15:00:00 +0000
- SUSE-SR:2009:016, published Tue, 13 Oct 2009 14:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 10.3 |
| |
| openSUSE 10.3 |
|