Patchwire CVEs, their patch status, and feeds to follow them

CVE-2009-1097

Fixed in a distro release EPSS 7%

Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.

Published 2009-03-25 · CVE record · OSV

Products: sun jdk, sun jre

Distro releases

ReleasePackageFixed in
Debian 5.0openjdk-66b11-9.1+lenny2
Red Hat Enterprise Linux 5java-1.6.0-openjdk1:1.6.0.0-0.30.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-debuginfo1:1.6.0.0-0.30.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-demo1:1.6.0.0-0.30.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-devel1:1.6.0.0-0.30.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-javadoc1:1.6.0.0-0.30.b09.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-src1:1.6.0.0-0.30.b09.el5
Red Hat network satellite 5.3java-1.6.0-ibm1:1.6.0.7-1jpp.3.el4
Red Hat network satellite 5.3java-1.6.0-ibm1:1.6.0.7-1jpp.2.el5
Red Hat network satellite 5.3java-1.6.0-ibm-devel1:1.6.0.7-1jpp.2.el5
Red Hat network satellite 5.3java-1.6.0-ibm-devel1:1.6.0.7-1jpp.3.el4
Red Hat rhel extras 4java-1.5.0-ibm1:1.5.0.9-1jpp.5.el4
Red Hat rhel extras 4java-1.5.0-ibm-demo1:1.5.0.9-1jpp.5.el4
Red Hat rhel extras 4java-1.5.0-ibm-devel1:1.5.0.9-1jpp.5.el4
Red Hat rhel extras 4java-1.5.0-ibm-javacomm1:1.5.0.9-1jpp.5.el4
Red Hat rhel extras 4java-1.5.0-ibm-jdbc1:1.5.0.9-1jpp.5.el4
Red Hat rhel extras 4java-1.5.0-ibm-plugin1:1.5.0.9-1jpp.5.el4
Red Hat rhel extras 4java-1.5.0-ibm-src1:1.5.0.9-1jpp.5.el4
Red Hat rhel extras 4java-1.6.0-ibm1:1.6.0.5-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-ibm-demo1:1.6.0.5-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-ibm-devel1:1.6.0.5-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-ibm-javacomm1:1.6.0.5-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-ibm-jdbc1:1.6.0.5-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-ibm-plugin1:1.6.0.5-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-ibm-src1:1.6.0.5-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun1:1.6.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-demo1:1.6.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-devel1:1.6.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-jdbc1:1.6.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-plugin1:1.6.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-src1:1.6.0.13-1jpp.1.el4
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm-accessibility1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.9-1jpp.3.el5
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.5-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun1:1.6.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-demo1:1.6.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-devel1:1.6.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-jdbc1:1.6.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-plugin1:1.6.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-src1:1.6.0.13-1jpp.1.el5