RHSA-2014_0486
Vulnerability from csaf_redhat - Published: 2014-05-13 19:47 - Updated: 2024-11-14 14:28The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.10.Z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.5.z:java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5.x86_64 | — |
Vendor Fix
fix
|
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Loading 1.4 MB of JSON…
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.