Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted applet.
Vector
NETWORK
Complexity
MEDIUM
Authentication
NONE
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
| Advisory | Patch | Confirmed | Link |
|---|---|---|---|
| ADV-2010-1191 | |||
| 40240 | |||
| http://support.apple.com/kb/HT4171 | |||
| http://support.apple.com/kb/HT4170 | |||
| APPLE-SA-2010-05-18-2 | |||
| APPLE-SA-2010-05-18-1 | |||
| 1024012 | |||
| 39819 |