2008-12-05 12:30:00 2017-09-29 03:32:36

Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Sun Jre 6 Update 3 (not an official CPE) Sun Jre 6 Update 2 (not an official CPE) Sun Jre 6 Update 1 (not an official CPE) Sun Jdk 5.0 Update 13 (not an official CPE) Sun Jre 6 Update 7 (not an official CPE) Sun Jre 6 Update 6 (not an official CPE) Sun Jre 6 (not an official CPE) Sun Jre 5.0 (not an official CPE) Sun Jre 6 Update 8 (not an official CPE) Sun Jre 5.0 Update 10 (not an official CPE) Sun Jre 5.0 Update 11 (not an official CPE) Sun Jre 5.0 Update 12 (not an official CPE) Sun Jdk 5.0 Update 3 (not an official CPE) Sun Jdk 6 Update 3 (not an official CPE) Sun Jdk 6 Update 2 (not an official CPE) Sun Jdk 6 Update 1 (not an official CPE) Sun Jdk 5.0 Update 1 (not an official CPE) Sun Jdk 6 Update 5 (not an official CPE) Sun Jdk 5.0 Update 2 (not an official CPE) Sun Jre 6 Update 10 (not an official CPE) Sun Jdk 6 Update 4 (not an official CPE) Sun Jre 5.0 Update 13 (not an official CPE) Sun Jdk 6 Update 8 (not an official CPE) Sun Jre 5.0 Update 14 (not an official CPE) Sun Jre 5.0 Update 15 (not an official CPE) Sun Jre 5.0 Update 16 (not an official CPE) Sun Jdk 6 Update 7 (not an official CPE) Sun Jdk 6 Update 6 (not an official CPE) Sun Jdk 6 (not an official CPE) Sun Jdk 6 Update 10 (not an official CPE) Sun Jdk 5.0 Update 10 (not an official CPE) Sun Jdk 5.0 Update 11 (not an official CPE) Sun Jdk 5.0 Update 12 (not an official CPE) Sun Jre 5.0 Update 2 (not an official CPE) Sun Jre 5.0 Update 1 (not an official CPE) Sun Jre 6 Update 4 (not an official CPE) Sun Jre 6 Update 5 (not an official CPE) Sun Jdk 5.0 Update 16 (not an official CPE) Sun Jdk 5.0 Update 15 (not an official CPE) Sun Jdk 5.0 Update 14 (not an official CPE)