CVE-2009-0794

Name of the Vulnerable Software and Affected Versions Pulse-Java versions prior to the fixed version OpenJDK version 1.6.0.0

Description The issue is related to an integer overflow in the PulseAudioTargetDataL class. This allows remote attackers to cause a denial of service, resulting in an applet crash, by providing a crafted Pulse Audio source data line.

Recommendations For Pulse-Java, update to a version that includes the fix for the integer overflow in the PulseAudioTargetDataL class. For OpenJDK version 1.6.0.0, consider applying a patch or configuration change to mitigate the risk of denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability in other affected products.