Tom Hawtin

**Name of the Vulnerable Software and Affected Versions** Sun JDK and Java Runtime Environment (JRE) versions 5.0 Update 9 and earlier Sun JDK and Java Runtime Environment (JRE) versions 1.4.2 12 and earlier Sun JDK and Java Runtime Environment (JRE) versions 1.3.1 18 and earlier **Description** A buffer overflow issue allows applets to gain privileges via a GIF image with a block that has a 0 width field, triggering memory corruption. **Recommendations** For Sun JDK and Java Runtime Environment (JRE) versions 5.0 Update 9 and earlier, update to a version later than 5.0 Update 9. For Sun JDK and Java Runtime Environment (JRE) versions 1.4.2 12 and earlier, update to a version later than 1.4.2 12. For Sun JDK and Java Runtime Environment (JRE) versions 1.3.1 18 and earlier, update to a version later than 1.3.1 18.

Name of the Vulnerable Software and Affected Versions: Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 6 and earlier Sun Java System Development Kit (SDK) and JRE versions 1.4.2 12 and earlier 1.4.x Sun Java SDK and JRE versions 1.3.1 18 and earlier Description: The issue allows attackers to use untrusted applets to access data in other applets. Recommendations: For Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 6 and earlier, update to a version later than 5.0 Update 6. For Sun Java System Development Kit (SDK) and JRE versions 1.4.2 12 and earlier 1.4.x, update to a version later than 1.4.2 12. For Sun Java SDK and JRE versions 1.3.1 18 and earlier, update to a version later than 1.3.1 18.

Name of the Vulnerable Software and Affected Versions: Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 5 and earlier Sun Java System Development Kit (SDK) and JRE versions 1.4.2 10 and earlier 1.4.x Sun Java SDK and JRE versions 1.3.1 18 and earlier Description: The issue allows attackers to use untrusted applets to access data in other applets. Recommendations: For Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 5 and earlier, update to a version later than 5.0 Update 5. For Sun Java System Development Kit (SDK) and JRE versions 1.4.2 10 and earlier 1.4.x, update to a version later than 1.4.2 10. For Sun Java SDK and JRE versions 1.3.1 18 and earlier, update to a version later than 1.3.1 18.

Name of the Vulnerable Software and Affected Versions: Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 7 and earlier Sun Java System Development Kit (SDK) and JRE versions 1.4.2 12 and earlier 1.4.x Description: The issue allows attackers to develop Java applets or applications that can gain privileges, related to serialization in JRE. Recommendations: For Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) versions 5.0 Update 7 and earlier, update to a version later than 5.0 Update 7. For Sun Java System Development Kit (SDK) and JRE versions 1.4.2 12 and earlier 1.4.x, update to a version later than 1.4.2 12.