Insecure functionality In java-1.6.0-openjdk
Description
An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox restrictions.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | 1:1.6.0.35-1.13.7.1.el7_1 | ||
rpm rhel5 | 1:1.7.0.79-2.5.5.2.el5_11 | ||
rpm rhel7 | - | - | |
rpm rhel6 | 1:1.6.0.35-1.13.7.1.el6_6 | ||
rpm rhel5 | 1:1.6.0.35-1.13.7.1.el5_11 | ||
rpm rhel6 | 1:1.7.0.79-2.5.5.1.el6_6 | ||
rpm rhel7 | 1:1.7.0.79-2.5.5.1.el7_1 | ||
rpm rhel6 | 1:1.8.0.45-28.b13.el6_6 | ||
rpm rhel7 | 1:1.8.0.45-30.b13.el7_1 |
Aliases
1. 2. 3.