The version of Sun Java Runtime Environment (JRE) J2SE 1.4.2 installed on the remote host is affected by multiple security issues :

  - A buffer overflow vulnerability in the font processing     module of the JRE could allow an untrusted     applet/application to elevate its privileges to read,     write and execute local applications with the privileges     of the user running an untrusted applet (238666).

  - A vulnerability in the JRE could allow an untrusted     applet/application to elevate its privileges to read,     write and execute local applications with the privileges     of the user running an untrusted applet (238967).

  - A buffer overflow vulnerability in Java Web Start could     allow an untrusted applet to elevate its privileges to     read, write and execute local applications available to     users running an untrusted application (238905).

  - A vulnerability in Java Web Start, could allow an     untrusted application to create or delete arbitrary     files subject to the privileges of the user running the     application (238905).

  - A vulnerability in Java Web Start, may disclose the     location of Java Web Start cache (238905).

  - A vulnerability in the JRE may allow an untrusted applet     to establish connections to services running on the     local host and potentially exploit vulnerabilities     existing in the underlying JRE (238968).

  - It should be noted that J2SE 1.4.2 is in its EOL period,     and the transition is set to complete on Oct 30th 2008.

The version of Sun Java Runtime Environment (JRE) 6.0 installed on the remote host is affected by multiple security issues :

  - A vulnerability in the JRE could allow unauthorized     access to certain URL resources or cause a denial of     service condition while processing XML data. In order to     successfully exploit this issue a JAX-WS client/service     included with a trusted application should process the     malicious XML content (238628).

  - A vulnerability in the JRE may allow an untrusted applet     to access information from another applet (238687).

  - A buffer overflow vulnerability in Java Web Start could     allow an untrusted applet to elevate its privileges to     read, write and execute local applications available to     users running an untrusted application (238905).

  - A vulnerability in Java Web Start, could allow an     untrusted application to create or delete arbitrary     files subject to the privileges of the user running the     application (238905).

  - A vulnerability in Java Web Start, may disclose the     location of Java Web Start cache (238905).

  - An implementation defect in the JRE may allow an applet     designed to run 'only' on JRE 5.0 Update 6 or later may     run on older releases of the JRE. Note this only affects     Windows Vista releases of the JRE (238966).

  - Vulnerability in Sun Java Management Extensions (JMX)     could allow a JMX client running on a remote host to     perform unauthorized actions on a host running JMX with     local monitoring enabled (238965).

  - A vulnerability in the JRE could allow an untrusted     applet / application to elevate its privileges to read,     write and execute local applications with privileges of     the user running an untrusted applet (238967,238687).

  - A vulnerability in the JRE may allow an untrusted applet     to establish connections to services running on the     localhost and potentially exploit vulnerabilities     existing in the underlying JRE (238968).

The version of Sun Java Runtime Environment (JRE) 6.0 installed on the remote host is affected by multiple security issues :

  - A vulnerability in the JRE could allow unauthorized     access to certain URL resources or cause a denial of     service condition while processing XML data. In order to     successfully exploit this issue, a JAX-WS client/service     included with a trusted application should process the     malicious XML content (238628).

  - A vulnerability in the JRE may allow an untrusted applet     to access information from another applet (238687).

  - A buffer overflow vulnerability in Java Web Start could     allow an untrusted applet to elevate its privileges to     read, write and execute local applications available to     users running an untrusted application (238905).

  - A vulnerability in Java Web Start could allow an     untrusted application to create or delete arbitrary     files subject to the privileges of the user running the     application (238905).

  - A vulnerability in Java Web Start may disclose the     location of Java Web Start cache (238905).

  - A vulnerability in Sun Java Management Extensions (JMX)     could allow a JMX client running on a remote host to     perform unauthorized actions on a host running JMX with     local monitoring enabled (238965).

  - A vulnerability in the JRE could allow an untrusted     applet / application to elevate its privileges to     read, write and execute local applications with the     privileges of the user running an untrusted applet     (238967, 238687).

  - A vulnerability in the JRE may allow an untrusted     applet to establish connections to services running on     the localhost and potentially exploit vulnerabilities     existing in the underlying JRE (238968).

ID	名稱	產品	系列	已發布	已更新	嚴重性
64817	Sun Java J2SE 1.4.2 < Update 18 Multiple Vulnerabilities (Unix)	Nessus	Misc.	2013/2/22	2022/4/11	critical
33488	Sun Java JDK/JRE 6 < Update 7 Multiple Vulnerabilities	Nessus	Windows	2008/7/15	2022/4/11	high
64833	Sun Java JDK/JRE 6 < Update 7 Multiple Vulnerabilities (Unix)	Nessus	Misc.	2013/2/22	2022/4/11	critical

偵測

搜尋 Plugin

critical

high

critical