PT-2007-4301 · Oracle · Java Runtime Environment+1

Published 2007-06-04 · Updated 2008-01-10 · CVE-2007-3004

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Java Runtime Environment versions prior to 6 Update 11 Java Runtime Environment versions 5.0 Update 10 and earlier Java Runtime Environment versions 1.4.2 14 and earlier Java Runtime Environment versions 1.3.1 20 and earlier

Description: A buffer overflow issue exists in the image parsing implementation, allowing remote attackers to execute arbitrary programs or read and modify arbitrary files via applets or applications that grant privileges to themselves.

Recommendations: For Java Runtime Environment versions prior to 6 Update 11, update to version 6 Update 11 or later to resolve the issue. For Java Runtime Environment versions 5.0 Update 10 and earlier, update to a version later than 5.0 Update 10 to resolve the issue. For Java Runtime Environment versions 1.4.2 14 and earlier, update to a version later than 1.4.2 14 to resolve the issue. For Java Runtime Environment versions 1.3.1 20 and earlier, update to a version later than 1.3.1 20 to resolve the issue.

Related Identifiers

CVE-2007-3004

RHSA-2008:0133

Affected Products

Java Platform

Java Runtime Environment

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2007-3004 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 · Note