Oval Definition:	oval:org.mitre.oval:def:11566
Revision Date: 2013-04-29 Version: 12 Title: Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643. Description: Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-3874 Platform(s): CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 OR java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 OR java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 OR java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 OR java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5
BACK