Oval Definition:	oval:org.opensuse.security:def:20093874
Revision Date: 2022-05-20 Version: 1 Title: CVE-2009-3874 Description: Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643. Family: unix Class: vulnerability Status: Reference(s): CVE-2009-3874 Mitre CVE-2009-3874 SUSE CVE-2009-3874 SUSE-SA:2009:058 SUSE-SA:2009:058 SUSE-SA:2010:002 SUSE-SA:2010:002 SUSE-SA:2010:003 SUSE-SA:2010:003 SUSE-SA:2010:004 SUSE-SA:2010:004 Platform(s): Open Enterprise Server openSUSE 11.0 openSUSE 11.1 openSUSE 11.2 SUSE Linux Enterprise 11 Moblin 2.0 SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP3 for x86 SUSE Linux Enterprise Desktop 11 GA SUSE Linux Enterprise SDK 10 SP2 SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise SDK 11 GA SUSE Linux Enterprise Server 10 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 GA SUSE Linux Enterprise Server for SAP 10 SP2 SUSE Linux Enterprise Server for SAP Applications 11 Product(s): Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information java-1_4_2-ibm-1.4.2_sr13.3-1.1 is installed OR java-1_4_2-ibm-jdbc-1.4.2_sr13-0.1 is installed OR java-1_4_2-ibm-plugin-1.4.2_sr13-0.1 is installed OR java-1_6_0-ibm-1.6.0_sr7.0-1.1 is installed OR java-1_6_0-ibm-alsa-1.6.0-124.6 is installed OR java-1_6_0-ibm-alsa-x86-1.6.0-124.7 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr7.0-1.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr7.0-1.1 is installed OR java-1_6_0-ibm-plugin-1.6.0-124.6 is installed OR java-1_6_0-ibm-x86-1.6.0-124.7 is installed Definition Synopsis Release Information sles10-sp2-sap is installed AND java-1_5_0-ibm-32bit less than 1.5.0_sr11-0.4.1 OR java-1_5_0-ibm-alsa-32bit less than 1.5.0_sr11-0.4.1 OR java-1_5_0-ibm-devel-32bit less than 1.5.0_sr11-0.4.1 OR java-1_5_0-ibm-devel less than 1.5.0_sr11-0.4.1 OR java-1_5_0-ibm-fonts less than 1.5.0_sr11-0.4.1 OR java-1_5_0-ibm less than 1.5.0_sr11-0.4.1 OR Package Information sles10-sp3 is installed AND java-1_5_0-ibm-32bit less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm-64bit less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm-alsa-32bit less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm-devel-32bit less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm-devel less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm-fonts less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm-jdbc less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm-plugin less than 1.5.0_sr11-0.4.2 OR java-1_5_0-ibm less than 1.5.0_sr11-0.4.2 OR Package Information sles10-sp2-sap is installed java-1_4_2-ibm-devel less than 1.4.2_sr13.3-1.4.1 OR java-1_4_2-ibm less than 1.4.2_sr13.3-1.4.1 OR sles10-sp2-sdk is installed java-1_4_2-ibm-devel less than 1.4.2_sr13.3-1.4.1 OR java-1_4_2-ibm-jdbc less than 1.4.2_sr13.3-1.4.1 OR java-1_4_2-ibm-plugin less than 1.4.2_sr13.3-1.4.1 OR java-1_4_2-ibm less than 1.4.2_sr13.3-1.4.1 OR Package Information sles10-sp3 is installed AND java-1_4_2-ibm-devel less than 1.4.2_sr13.3-1.4.1 OR java-1_4_2-ibm-jdbc less than 1.4.2_sr13.3-1.4.1 OR java-1_4_2-ibm less than 1.4.2_sr13.3-1.4.1 Definition Synopsis Release Information SUSE Linux Enterprise Server 11 is installed OR SUSE Linux Enterprise Server for SAP Applications 11 is installed AND Package Information java-1_4_2-ibm-1.4.2_sr13.3-1.1.1 is installed OR java-1_4_2-ibm-jdbc-1.4.2_sr13.3-1.1.1 is installed OR java-1_4_2-ibm-plugin-1.4.2_sr13.3-1.1.1 is installed OR java-1_6_0-ibm-1.6.0_sr7.0-1.1.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr7.0-1.1.1 is installed OR java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr7.0-1.1.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr7.0-1.1.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr7.0-1.1.1 is installed OR java-1_6_0-ibm-x86-1.6.0-124.7.1 is installed
BACK