Sun Java Runtime Environment Image Parsing Heap Buffer Overflow Vulnerability

Bugtraq ID:	28125
Class:	Boundary Condition Error
CVE:	CVE-2008-1193
Remote:	Yes
Local:	No
Published:	Mar 06 2008 12:00AM
Updated:	Mar 19 2015 08:43AM
Credit:	Chris Evans of Google Security Team is credited with the discovery of this vulnerability.
Vulnerable:	VMWare VirtualCenter Management Server 2 VMWare ESX Server 3.0.2 VMWare ESX Server 3.0.1 VMWare ESX Server 3.5 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise Desktop 10 SP1 SuSE openSUSE 10.3 Sun SDK (Windows Release Version) 1.2.2 _007 Sun SDK (Windows Production Release) 1.4.2 _15 Sun SDK (Windows Production Release) 1.4.2 _10 Sun SDK (Windows Production Release) 1.4.2 _09 Sun SDK (Windows Production Release) 1.4.2 _08 Sun SDK (Windows Production Release) 1.4.2 _05 Sun SDK (Windows Production Release) 1.4.2 _04 Sun SDK (Windows Production Release) 1.4.2 _03 Sun SDK (Windows Production Release) 1.4.2 Sun SDK (Windows Production Release) 1.4.1 _03 Sun SDK (Windows Production Release) 1.4.1 _02 Sun SDK (Windows Production Release) 1.4.1 _01 Sun SDK (Windows Production Release) 1.4.1 Sun SDK (Windows Production Release) 1.4 .0_4 Sun SDK (Windows Production Release) 1.4 .0_03 Sun SDK (Windows Production Release) 1.4 .0_02 Sun SDK (Windows Production Release) 1.4 .0_01 Sun SDK (Windows Production Release) 1.4 Sun SDK (Windows Production Release) 1.3.1 _21 Sun SDK (Windows Production Release) 1.3.1 _20 Sun SDK (Windows Production Release) 1.3.1 _15 Sun SDK (Windows Production Release) 1.3.1 _14 Sun SDK (Windows Production Release) 1.3.1 _13 Sun SDK (Windows Production Release) 1.3.1 _12 Sun SDK (Windows Production Release) 1.3.1 _11 Sun SDK (Windows Production Release) 1.3.1 _10 Sun SDK (Windows Production Release) 1.3.1 _09 Sun SDK (Windows Production Release) 1.3.1 _08 Sun SDK (Windows Production Release) 1.3.1 _07 Sun SDK (Windows Production Release) 1.3.1 _06 Sun SDK (Windows Production Release) 1.3.1 _05 Sun SDK (Windows Production Release) 1.3.1 _04 Sun SDK (Windows Production Release) 1.3.1 _03 Sun SDK (Windows Production Release) 1.3.1 _02 Sun SDK (Windows Production Release) 1.3.1 _01a Sun SDK (Windows Production Release) 1.3 .0_05 Sun SDK (Windows Production Release) 1.3 .0_02 Sun SDK (Windows Production Release) 1.2.2 _015 Sun SDK (Windows Production Release) 1.2.2 _014 Sun SDK (Windows Production Release) 1.2.2 _013 Sun SDK (Windows Production Release) 1.2.2 _012 Sun SDK (Windows Production Release) 1.2.2 _011 Sun SDK (Windows Production Release) 1.2.2 _010 Sun SDK (Windows Production Release) 1.2.2 _007 Sun SDK (Windows Production Release) 1.2.1 Sun SDK (Windows Production Release) 1.2 Sun SDK (Windows Production Release) 1.1.8 _007 Sun SDK (Windows Production Release) 1.4.2_16 Sun SDK (Windows Production Release) 1.4.2_14 Sun SDK (Windows Production Release) 1.4.2_13 Sun SDK (Windows Production Release) 1.4.2_12 Sun SDK (Windows Production Release) 1.4.2_11 Sun SDK (Solaris Reference Release) 1.2.2 _015 Sun SDK (Solaris Reference Release) 1.2.2 _014 Sun SDK (Solaris Reference Release) 1.2.2 _013 Sun SDK (Solaris Reference Release) 1.2.2 _012 Sun SDK (Solaris Reference Release) 1.2.2 _011 Sun SDK (Solaris Reference Release) 1.2.2 _010 Sun SDK (Solaris Reference Release) 1.2.2 _007 Sun SDK (Solaris Reference Release) 1.2.1 Sun SDK (Solaris Reference Release) 1.2 Sun SDK (Solaris Production Release) 1.4.2 _15 Sun SDK (Solaris Production Release) 1.4.2 _10 Sun SDK (Solaris Production Release) 1.4.2 _09 Sun SDK (Solaris Production Release) 1.4.2 _08 Sun SDK (Solaris Production Release) 1.4.2 _05 Sun SDK (Solaris Production Release) 1.4.2 _04 Sun SDK (Solaris Production Release) 1.4.2 _03 Sun SDK (Solaris Production Release) 1.4.2 Sun SDK (Solaris Production Release) 1.4.1 _03 Sun SDK (Solaris Production Release) 1.4.1 _02 Sun SDK (Solaris Production Release) 1.4.1 _01 Sun SDK (Solaris Production Release) 1.4.1 Sun SDK (Solaris Production Release) 1.4 .0_4 Sun SDK (Solaris Production Release) 1.4 .0_03 Sun SDK (Solaris Production Release) 1.4 .0_02 Sun SDK (Solaris Production Release) 1.4 Sun SDK (Solaris Production Release) 1.3.1 _21 Sun SDK (Solaris Production Release) 1.3.1 _20 Sun SDK (Solaris Production Release) 1.3.1 _15 Sun SDK (Solaris Production Release) 1.3.1 _14 Sun SDK (Solaris Production Release) 1.3.1 _13 Sun SDK (Solaris Production Release) 1.3.1 _12 Sun SDK (Solaris Production Release) 1.3.1 _11 Sun SDK (Solaris Production Release) 1.3.1 _10 Sun SDK (Solaris Production Release) 1.3.1 _09 Sun SDK (Solaris Production Release) 1.3.1 _08 Sun SDK (Solaris Production Release) 1.3.1 _07 Sun SDK (Solaris Production Release) 1.3.1 _06 Sun SDK (Solaris Production Release) 1.3.1 _05 Sun SDK (Solaris Production Release) 1.3.1 _03 Sun SDK (Solaris Production Release) 1.3.1 _02 Sun SDK (Solaris Production Release) 1.3.1 _01 Sun SDK (Solaris Production Release) 1.3 _05 Sun SDK (Solaris Production Release) 1.3 _02 Sun SDK (Solaris Production Release) 1.3 .0_02 Sun SDK (Solaris Production Release) 1.3 Sun SDK (Solaris Production Release) 1.2.2 _14 Sun SDK (Solaris Production Release) 1.2.2 _13 Sun SDK (Solaris Production Release) 1.2.2 _12 Sun SDK (Solaris Production Release) 1.2.2 _11 Sun SDK (Solaris Production Release) 1.2.2 _10 Sun SDK (Solaris Production Release) 1.2.2 _07a Sun SDK (Solaris Production Release) 1.2.2 _07 Sun SDK (Solaris Production Release) 1.2.2 _05a Sun SDK (Solaris Production Release) 1.2.2 _011 Sun SDK (Solaris Production Release) 1.2.2 Sun SDK (Solaris Production Release) 1.2.1 Sun SDK (Solaris Production Release) 1.2 Sun SDK (Solaris Production Release) 1.4.2_16 Sun SDK (Solaris Production Release) 1.4.2_14 Sun SDK (Solaris Production Release) 1.4.2_13 Sun SDK (Solaris Production Release) 1.4.2_12 Sun SDK (Solaris Production Release) 1.4.2_11 Sun SDK (Solaris Production Release) 1.3.1_20 Sun SDK (Linux Production Release) 1.6 _1 Sun SDK (Linux Production Release) 1.6 _02 Sun SDK (Linux Production Release) 1.5 _11 Sun SDK (Linux Production Release) 1.5 _10 Sun SDK (Linux Production Release) 1.5 _07 Sun SDK (Linux Production Release) 1.5 _06 Sun SDK (Linux Production Release) 1.5 _05 Sun SDK (Linux Production Release) 1.5 _04 Sun SDK (Linux Production Release) 1.5 _03 Sun SDK (Linux Production Release) 1.5 _02 Sun SDK (Linux Production Release) 1.5 _01 Sun SDK (Linux Production Release) 1.5 Sun SDK (Linux Production Release) 1.4.2 _15 Sun SDK (Linux Production Release) 1.4.2 _10 Sun SDK (Linux Production Release) 1.4.2 _09 Sun SDK (Linux Production Release) 1.4.2 _08 Sun SDK (Linux Production Release) 1.4.2 _07 Sun SDK (Linux Production Release) 1.4.2 _06 Sun SDK (Linux Production Release) 1.4.2 _05 Sun SDK (Linux Production Release) 1.4.2 _04 Sun SDK (Linux Production Release) 1.4.2 _03 Sun SDK (Linux Production Release) 1.4.2 _02 Sun SDK (Linux Production Release) 1.4.2 _01 Sun SDK (Linux Production Release) 1.4.2 Sun SDK (Linux Production Release) 1.4.1 _03 Sun SDK (Linux Production Release) 1.4.1 _02 Sun SDK (Linux Production Release) 1.4.1 _01 Sun SDK (Linux Production Release) 1.4.1 Sun SDK (Linux Production Release) 1.4 .0_4 Sun SDK (Linux Production Release) 1.4 .0_03 Sun SDK (Linux Production Release) 1.4 .0_02 Sun SDK (Linux Production Release) 1.4 Sun SDK (Linux Production Release) 1.3.1 _21 Sun SDK (Linux Production Release) 1.3.1 _20 Sun SDK (Linux Production Release) 1.3.1 _19 Sun SDK (Linux Production Release) 1.3.1 _15 Sun SDK (Linux Production Release) 1.3.1 _14 Sun SDK (Linux Production Release) 1.3.1 _13 Sun SDK (Linux Production Release) 1.3.1 _12 Sun SDK (Linux Production Release) 1.3.1 _11 Sun SDK (Linux Production Release) 1.3.1 _10 Sun SDK (Linux Production Release) 1.3.1 _09 Sun SDK (Linux Production Release) 1.3.1 _08 Sun SDK (Linux Production Release) 1.3.1 _07 Sun SDK (Linux Production Release) 1.3.1 _06 Sun SDK (Linux Production Release) 1.3.1 _05 Sun SDK (Linux Production Release) 1.3.1 _03 Sun SDK (Linux Production Release) 1.3.1 _02 Sun SDK (Linux Production Release) 1.3.1 _01 Sun SDK (Linux Production Release) 1.3 _05 Sun SDK (Linux Production Release) 1.3 .0_02 Sun SDK (Linux Production Release) 1.3 Sun SDK (Linux Production Release) 1.2.2 _13 Sun SDK (Linux Production Release) 1.2.2 _12 Sun SDK (Linux Production Release) 1.2.2 _015 Sun SDK (Linux Production Release) 1.2.2 _014 Sun SDK (Linux Production Release) 1.2.2 _011 Sun SDK (Linux Production Release) 1.2.2 _010 Sun SDK (Linux Production Release) 1.2.2 _007 Sun SDK (Linux Production Release) 1.2.2 _005 Sun SDK (Linux Production Release) 1.5.0_08 Sun SDK (Linux Production Release) 1.4.2_16 Sun SDK (Linux Production Release) 1.4.2_14 Sun SDK (Linux Production Release) 1.4.2_13 Sun SDK (Linux Production Release) 1.4.2_12 Sun SDK (Linux Production Release) 1.4.2_11 Sun JRE (Windows Production Release) 1.5 _06 Sun JRE (Windows Production Release) 1.5 _05 Sun JRE (Windows Production Release) 1.5 _04 Sun JRE (Windows Production Release) 1.5 _03 Sun JRE (Windows Production Release) 1.5 _02 Sun JRE (Windows Production Release) 1.5 _01 Sun JRE (Windows Production Release) 1.5 Sun JRE (Windows Production Release) 1.4.2 _10 Sun JRE (Windows Production Release) 1.4.2 _09 Sun JRE (Windows Production Release) 1.4.2 _08 Sun JRE (Windows Production Release) 1.4.2 _07 Sun JRE (Windows Production Release) 1.4.2 _06 Sun JRE (Windows Production Release) 1.4.2 _05 Sun JRE (Windows Production Release) 1.4.2 _04 Sun JRE (Windows Production Release) 1.4.2 _03 Sun JRE (Windows Production Release) 1.4.2 _02 Sun JRE (Windows Production Release) 1.4.2 _01 Sun JRE (Windows Production Release) 1.4.2 Sun JRE (Windows Production Release) 1.4.1 _07 Sun JRE (Windows Production Release) 1.4.1 _03 Sun JRE (Windows Production Release) 1.4.1 _02 Sun JRE (Windows Production Release) 1.4.1 _01 + Opera Software Opera Web Browser 7.11 j + Opera Software Opera Web Browser 7.11 Sun JRE (Windows Production Release) 1.4.1 Sun JRE (Windows Production Release) 1.4 .0_04 Sun JRE (Windows Production Release) 1.4 .0_03 Sun JRE (Windows Production Release) 1.4 .0_02 Sun JRE (Windows Production Release) 1.4 .0_01 Sun JRE (Windows Production Release) 1.4 Sun JRE (Windows Production Release) 1.3.1 _14 Sun JRE (Windows Production Release) 1.3.1 _13 Sun JRE (Windows Production Release) 1.3.1 _12 Sun JRE (Windows Production Release) 1.3.1 _11 Sun JRE (Windows Production Release) 1.3.1 _10 Sun JRE (Windows Production Release) 1.3.1 _09 Sun JRE (Windows Production Release) 1.3.1 _08 Sun JRE (Windows Production Release) 1.3.1 _07 Sun JRE (Windows Production Release) 1.3.1 _06 Sun JRE (Windows Production Release) 1.3.1 _05 Sun JRE (Windows Production Release) 1.3.1 _04 Sun JRE (Windows Production Release) 1.3.1 _03 Sun JRE (Windows Production Release) 1.3.1 _02 Sun JRE (Windows Production Release) 1.3.1 _01a Sun JRE (Windows Production Release) 1.3.1 _01 Sun JRE (Windows Production Release) 1.3 _01 Sun JRE (Windows Production Release) 1.3 .0_05 Sun JRE (Windows Production Release) 1.3 .0_04 Sun JRE (Windows Production Release) 1.3 .0_02 Sun JRE (Windows Production Release) 1.3 Sun JRE (Windows Production Release) 1.2.2 _12 Sun JRE (Windows Production Release) 1.2.2 _015 Sun JRE (Windows Production Release) 1.2.2 _014 Sun JRE (Windows Production Release) 1.2.2 _013 Sun JRE (Windows Production Release) 1.2.2 _011 Sun JRE (Windows Production Release) 1.2.2 _010 Sun JRE (Windows Production Release) 1.2.2 _007 Sun JRE (Windows Production Release) 1.2.2 Sun JRE (Windows Production Release) 1.2.1 Sun JRE (Windows Production Release) 1.2 Sun JRE (Windows Production Release) 1.1.8 _009 Sun JRE (Windows Production Release) 1.1.8 _008 Sun JRE (Windows Production Release) 1.1.8 _007 Sun JRE (Windows Production Release) 1.1.8 _005 Sun JRE (Windows Production Release) 1.1.8 Sun JRE (Windows Production Release) 1.1.7 B_007 Sun JRE (Windows Production Release) 1.1.6 _09 Sun JRE (Windows Production Release) 1.6.0_2 Sun JRE (Windows Production Release) 1.6.0_03 Sun JRE (Windows Production Release) 1.6.0_02 Sun JRE (Windows Production Release) 1.6.0_01 Sun JRE (Windows Production Release) 1.5.0_14 Sun JRE (Windows Production Release) 1.5.0_13 Sun JRE (Windows Production Release) 1.5.0_12 Sun JRE (Windows Production Release) 1.5.0_11 Sun JRE (Windows Production Release) 1.5.0_10 Sun JRE (Windows Production Release) 1.5.0.0_09 Sun JRE (Windows Production Release) 1.5.0.0_08 Sun JRE (Windows Production Release) 1.5.0.0_07 Sun JRE (Windows Production Release) 1.4.2_16 Sun JRE (Windows Production Release) 1.4.2_15 Sun JRE (Windows Production Release) 1.4.2_14 Sun JRE (Windows Production Release) 1.4.2_13 Sun JRE (Windows Production Release) 1.4.2_12 Sun JRE (Windows Production Release) 1.4.2_11 Sun JRE (Windows Production Release) 1.3.1_21 Sun JRE (Windows Production Release) 1.3.1_20 Sun JRE (Windows Production Release) 1.3.1_19 Sun JRE (Windows Production Release) 1.3.1_18 Sun JRE (Windows Production Release) 1.3.1_17 Sun JRE (Windows Production Release) 1.3.1_16 Sun JRE (Windows Production Release) 1.3.1_15 Sun JRE (Solaris Reference Release) 1.4.2 _12 Sun JRE (Solaris Reference Release) 1.2.2 _015 Sun JRE (Solaris Reference Release) 1.2.2 _014 Sun JRE (Solaris Reference Release) 1.2.2 _013 Sun JRE (Solaris Reference Release) 1.2.2 _012 Sun JRE (Solaris Reference Release) 1.2.2 _011 Sun JRE (Solaris Reference Release) 1.2.2 _010 Sun JRE (Solaris Reference Release) 1.2.2 _007 Sun JRE (Solaris Reference Release) 1.2.2 Sun JRE (Solaris Reference Release) 1.2.1 Sun JRE (Solaris Reference Release) 1.2 Sun JRE (Solaris Reference Release) 1.1.8 _099 Sun JRE (Solaris Reference Release) 1.1.8 _008 Sun JRE (Solaris Reference Release) 1.1.8 _007 Sun JRE (Solaris Reference Release) 1.1.8 _005 Sun JRE (Solaris Reference Release) 1.1.8 Sun JRE (Solaris Reference Release) 1.1.7 B_007 Sun JRE (Solaris Reference Release) 1.1.6 _009 Sun JRE (Solaris Production Release) 1.5 _06 Sun JRE (Solaris Production Release) 1.5 _05 Sun JRE (Solaris Production Release) 1.5 _04 Sun JRE (Solaris Production Release) 1.5 _03 Sun JRE (Solaris Production Release) 1.5 _02 Sun JRE (Solaris Production Release) 1.5 _01 Sun JRE (Solaris Production Release) 1.5 Sun JRE (Solaris Production Release) 1.4.2 _10 Sun JRE (Solaris Production Release) 1.4.2 _09 Sun JRE (Solaris Production Release) 1.4.2 _08 Sun JRE (Solaris Production Release) 1.4.2 _07 Sun JRE (Solaris Production Release) 1.4.2 _06 Sun JRE (Solaris Production Release) 1.4.2 _05 Sun JRE (Solaris Production Release) 1.4.2 _04 Sun JRE (Solaris Production Release) 1.4.2 _03 Sun JRE (Solaris Production Release) 1.4.2 _02 Sun JRE (Solaris Production Release) 1.4.2 _01 Sun JRE (Solaris Production Release) 1.4.2 Sun JRE (Solaris Production Release) 1.4.1 _03 Sun JRE (Solaris Production Release) 1.4.1 _02 Sun JRE (Solaris Production Release) 1.4.1 _01 Sun JRE (Solaris Production Release) 1.4.1 Sun JRE (Solaris Production Release) 1.4 .0_04 Sun JRE (Solaris Production Release) 1.4 .0_03 Sun JRE (Solaris Production Release) 1.4 .0_02 Sun JRE (Solaris Production Release) 1.4 .0_01 Sun JRE (Solaris Production Release) 1.4 Sun JRE (Solaris Production Release) 1.3.1 _14 Sun JRE (Solaris Production Release) 1.3.1 _13 Sun JRE (Solaris Production Release) 1.3.1 _12 Sun JRE (Solaris Production Release) 1.3.1 _11 Sun JRE (Solaris Production Release) 1.3.1 _10 Sun JRE (Solaris Production Release) 1.3.1 _09 Sun JRE (Solaris Production Release) 1.3.1 _08 Sun JRE (Solaris Production Release) 1.3.1 _07 Sun JRE (Solaris Production Release) 1.3.1 _06 Sun JRE (Solaris Production Release) 1.3.1 _05 Sun JRE (Solaris Production Release) 1.3.1 _04 Sun JRE (Solaris Production Release) 1.3.1 _03 Sun JRE (Solaris Production Release) 1.3.1 _02 Sun JRE (Solaris Production Release) 1.3.1 _01a Sun JRE (Solaris Production Release) 1.3.1 _01 Sun JRE (Solaris Production Release) 1.3.1 Sun JRE (Solaris Production Release) 1.3 _04 Sun JRE (Solaris Production Release) 1.3 _03 Sun JRE (Solaris Production Release) 1.3 _01 Sun JRE (Solaris Production Release) 1.3 .0_05 Sun JRE (Solaris Production Release) 1.3 .0_02 Sun JRE (Solaris Production Release) 1.3 Sun JRE (Solaris Production Release) 1.2.2 _11 Sun JRE (Solaris Production Release) 1.2.2 _07 Sun JRE (Solaris Production Release) 1.2.2 _05a Sun JRE (Solaris Production Release) 1.2.2 _014 Sun JRE (Solaris Production Release) 1.2.2 _013 Sun JRE (Solaris Production Release) 1.2.2 _012 Sun JRE (Solaris Production Release) 1.2.2 _011 Sun JRE (Solaris Production Release) 1.2.2 _010 Sun JRE (Solaris Production Release) 1.2.2 Sun JRE (Solaris Production Release) 1.2.1 Sun JRE (Solaris Production Release) 1.2 Sun JRE (Solaris Production Release) 1.1.8 _14 Sun JRE (Solaris Production Release) 1.1.8 _13 Sun JRE (Solaris Production Release) 1.1.8 _12 Sun JRE (Solaris Production Release) 1.1.8 _10 + Sun Solaris 8_x86 + Sun Solaris 8_sparc + Sun Solaris 7.0_x86 + Sun Solaris 7.0 + Sun Solaris 2.6_x86 + Sun Solaris 2.6 Sun JRE (Solaris Production Release) 1.1.8 _009 Sun JRE (Solaris Production Release) 1.1.8 Sun JRE (Solaris Production Release) 1.1.7 B Sun JRE (Solaris Production Release) 1.1.6 Sun JRE (Solaris Production Release) 1.6.0_2 Sun JRE (Solaris Production Release) 1.6.0_03 Sun JRE (Solaris Production Release) 1.6.0_02 Sun JRE (Solaris Production Release) 1.6.0_01 Sun JRE (Solaris Production Release) 1.5.0_14 Sun JRE (Solaris Production Release) 1.5.0_13 Sun JRE (Solaris Production Release) 1.5.0_12 Sun JRE (Solaris Production Release) 1.5.0_11 Sun JRE (Solaris Production Release) 1.5.0_10 Sun JRE (Solaris Production Release) 1.5.0.0_09 Sun JRE (Solaris Production Release) 1.5.0.0_08 Sun JRE (Solaris Production Release) 1.5.0.0_07 Sun JRE (Solaris Production Release) 1.4.2_16 Sun JRE (Solaris Production Release) 1.4.2_15 Sun JRE (Solaris Production Release) 1.4.2_14 Sun JRE (Solaris Production Release) 1.4.2_13 Sun JRE (Solaris Production Release) 1.4.2_12 Sun JRE (Solaris Production Release) 1.4.2_11 Sun JRE (Solaris Production Release) 1.3.1_21 Sun JRE (Solaris Production Release) 1.3.1_20 Sun JRE (Solaris Production Release) 1.3.1_19 Sun JRE (Solaris Production Release) 1.3.1_18 Sun JRE (Solaris Production Release) 1.3.1_17 Sun JRE (Solaris Production Release) 1.3.1_16 Sun JRE (Solaris Production Release) 1.3.1_15 Sun JRE (Linux Production Release) 1.6 _10 Sun JRE (Linux Production Release) 1.6 _04 Sun JRE (Linux Production Release) 1.6 Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.5 _05 Sun JRE (Linux Production Release) 1.5 _04 Sun JRE (Linux Production Release) 1.5 _03 Sun JRE (Linux Production Release) 1.5 _02 Sun JRE (Linux Production Release) 1.5 _01 Sun JRE (Linux Production Release) 1.5 .0 beta Sun JRE (Linux Production Release) 1.5 Sun JRE (Linux Production Release) 1.4.2 _10-b03 Sun JRE (Linux Production Release) 1.4.2 _10 Sun JRE (Linux Production Release) 1.4.2 _09 Sun JRE (Linux Production Release) 1.4.2 _08 Sun JRE (Linux Production Release) 1.4.2 _07 Sun JRE (Linux Production Release) 1.4.2 _06 Sun JRE (Linux Production Release) 1.4.2 _05 Sun JRE (Linux Production Release) 1.4.2 _04 Sun JRE (Linux Production Release) 1.4.2 _03 Sun JRE (Linux Production Release) 1.4.2 _02 Sun JRE (Linux Production Release) 1.4.2 _01 Sun JRE (Linux Production Release) 1.4.2 Sun JRE (Linux Production Release) 1.4.1 _03 Sun JRE (Linux Production Release) 1.4.1 _02 Sun JRE (Linux Production Release) 1.4.1 _01 Sun JRE (Linux Production Release) 1.4.1 Sun JRE (Linux Production Release) 1.4 .0_04 Sun JRE (Linux Production Release) 1.4 .0_03 Sun JRE (Linux Production Release) 1.4 .0_02 Sun JRE (Linux Production Release) 1.4 Sun JRE (Linux Production Release) 1.3.1 _21 Sun JRE (Linux Production Release) 1.3.1 _19 Sun JRE (Linux Production Release) 1.3.1 _18 Sun JRE (Linux Production Release) 1.3.1 _17 Sun JRE (Linux Production Release) 1.3.1 _16 Sun JRE (Linux Production Release) 1.3.1 _15 Sun JRE (Linux Production Release) 1.3.1 _14 Sun JRE (Linux Production Release) 1.3.1 _13 Sun JRE (Linux Production Release) 1.3.1 _12 Sun JRE (Linux Production Release) 1.3.1 _11 Sun JRE (Linux Production Release) 1.3.1 _10 Sun JRE (Linux Production Release) 1.3.1 _09 Sun JRE (Linux Production Release) 1.3.1 _08 Sun JRE (Linux Production Release) 1.3.1 _07 Sun JRE (Linux Production Release) 1.3.1 _06 Sun JRE (Linux Production Release) 1.3.1 _05 Sun JRE (Linux Production Release) 1.3.1 _04 Sun JRE (Linux Production Release) 1.3.1 _03 Sun JRE (Linux Production Release) 1.3.1 _02 Sun JRE (Linux Production Release) 1.3.1 _01a Sun JRE (Linux Production Release) 1.3.1 _01 Sun JRE (Linux Production Release) 1.3.1 Sun JRE (Linux Production Release) 1.3 .0_05 Sun JRE (Linux Production Release) 1.3 .0_04 Sun JRE (Linux Production Release) 1.3 .0_03 Sun JRE (Linux Production Release) 1.3 .0_02 Sun JRE (Linux Production Release) 1.3 .0_01 Sun JRE (Linux Production Release) 1.3 .0 Sun JRE (Linux Production Release) 1.2.2 _12 Sun JRE (Linux Production Release) 1.2.2 _015 Sun JRE (Linux Production Release) 1.2.2 _014 Sun JRE (Linux Production Release) 1.2.2 _013 Sun JRE (Linux Production Release) 1.2.2 _011 Sun JRE (Linux Production Release) 1.2.2 _010 Sun JRE (Linux Production Release) 1.2.2 _007 Sun JRE (Linux Production Release) 1.2.2 _006 Sun JRE (Linux Production Release) 1.2.2 _005 - Debian Linux 2.2 - Mandriva Linux Mandrake 7.2 - RedHat Linux 7.0 - S.u.S.E. Linux 7.0 Sun JRE (Linux Production Release) 1.2.2 _004 Sun JRE (Linux Production Release) 1.2.2 _003 Sun JRE (Linux Production Release) 1.2.2 Sun JRE (Linux Production Release) 1.2.1 _04 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 98SE - Microsoft Windows 98SE - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.6 Sun JRE (Linux Production Release) 1.1.8 _06 Sun JRE (Linux Production Release) 1.1.7 B_07 Sun JRE (Linux Production Release) 1.1.6 _09 Sun JRE (Linux Production Release) 1.6.0_03 Sun JRE (Linux Production Release) 1.6.0_02 Sun JRE (Linux Production Release) 1.6.0_01 Sun JRE (Linux Production Release) 1.5.0_14 Sun JRE (Linux Production Release) 1.5.0_13 Sun JRE (Linux Production Release) 1.5.0_12 Sun JRE (Linux Production Release) 1.5.0_11 Sun JRE (Linux Production Release) 1.5.0_10 Sun JRE (Linux Production Release) 1.5.0_09 Sun JRE (Linux Production Release) 1.5.0_08 Sun JRE (Linux Production Release) 1.4.2_16 Sun JRE (Linux Production Release) 1.4.2_15 Sun JRE (Linux Production Release) 1.4.2_14 Sun JRE (Linux Production Release) 1.4.2_13 Sun JRE (Linux Production Release) 1.4.2_12 Sun JRE (Linux Production Release) 1.4.2_11 Sun JRE (Linux Production Release) 1.3.1_21 Sun JRE (Linux Production Release) 1.3.1_20 Sun JNDI/LDAP 1.2.2 Sun JNDI 1.2.1 Sun JDK (Windows Production Release) 1.5 0_10 Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.5 .0_04 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Windows Production Release) 1.4.2 _09 Sun JDK (Windows Production Release) 1.4.2 _08 Sun JDK (Windows Production Release) 1.4.2 _05 Sun JDK (Windows Production Release) 1.4.2 _02 Sun JDK (Windows Production Release) 1.2.2 _006 Sun JDK (Windows Production Release) 1.2.2 _004 Sun JDK (Windows Production Release) 1.2.1 _004 Sun JDK (Windows Production Release) 1.2.1 _003 Sun JDK (Windows Production Release) 1.1.8 _009 Sun JDK (Windows Production Release) 1.1.8 _008 Sun JDK (Windows Production Release) 1.1.8 _007 Sun JDK (Windows Production Release) 1.1.8 _005 Sun JDK (Windows Production Release) 1.1.8 _002 Sun JDK (Windows Production Release) 1.1.7 B_007 Sun JDK (Windows Production Release) 1.1.7 B_005 Sun JDK (Windows Production Release) 1.1.6 _009 Sun JDK (Windows Production Release) 1.1.6 _007 Sun JDK (Windows Production Release) 1.6.0_03 Sun JDK (Windows Production Release) 1.6.0_02 Sun JDK (Windows Production Release) 1.6.0_01-b06 Sun JDK (Windows Production Release) 1.6.0_01 Sun JDK (Windows Production Release) 1.5.0_13 Sun JDK (Windows Production Release) 1.5.0_12 Sun JDK (Windows Production Release) 1.5.0_11-b03 Sun JDK (Windows Production Release) 1.5.0_07-b03 Sun JDK (Windows Production Release) 1.5.0.0_12 Sun JDK (Windows Production Release) 1.5.0.0_11 Sun JDK (Windows Production Release) 1.5.0.0_09 Sun JDK (Windows Production Release) 1.5.0.0_08 Sun JDK (Windows Production Release) 1.5.0.0_06 Sun JDK (Windows Production Release) 1.4.2_11 Sun JDK (Windows Production Release) 1.4.2_10 Sun JDK (Windows Production Release) 1.3.1_20 Sun JDK (Solaris Reference Release) 1.2.2 _006 Sun JDK (Solaris Reference Release) 1.2.2 _004 Sun JDK (Solaris Reference Release) 1.2.1 _004 Sun JDK (Solaris Reference Release) 1.2.1 _003 Sun JDK (Solaris Reference Release) 1.1.8 _099 Sun JDK (Solaris Reference Release) 1.1.8 _008 Sun JDK (Solaris Reference Release) 1.1.8 _007 Sun JDK (Solaris Reference Release) 1.1.8 _005 Sun JDK (Solaris Reference Release) 1.1.8 _002 Sun JDK (Solaris Reference Release) 1.1.8 Sun JDK (Solaris Reference Release) 1.1.7 B_007 Sun JDK (Solaris Reference Release) 1.1.7 B_005 Sun JDK (Solaris Reference Release) 1.1.6 _009 Sun JDK (Solaris Reference Release) 1.1.6 _007 Sun JDK (Solaris Production Release) 1.5 0_10 Sun JDK (Solaris Production Release) 1.5 0_09 Sun JDK (Solaris Production Release) 1.5 0_03 Sun JDK (Solaris Production Release) 1.5 _06 Sun JDK (Solaris Production Release) 1.5 .0_05 Sun JDK (Solaris Production Release) 1.5 .0_04 Sun JDK (Solaris Production Release) 1.5 .0_03 Sun JDK (Solaris Production Release) 1.4.2 _09 Sun JDK (Solaris Production Release) 1.4.2 _08 Sun JDK (Solaris Production Release) 1.4.2 _05 Sun JDK (Solaris Production Release) 1.3.1 _14 Sun JDK (Solaris Production Release) 1.2.2 _06 Sun JDK (Solaris Production Release) 1.2.2 _05 Sun JDK (Solaris Production Release) 1.2.1 Sun JDK (Solaris Production Release) 1.1.8 _15 Sun JDK (Solaris Production Release) 1.1.8 _14 Sun JDK (Solaris Production Release) 1.1.8 _13 Sun JDK (Solaris Production Release) 1.1.8 _12 Sun JDK (Solaris Production Release) 1.1.8 _11 Sun JDK (Solaris Production Release) 1.1.8 _10 Sun JDK (Solaris Production Release) 1.1.8 _009 Sun JDK (Solaris Production Release) 1.1.8 Sun JDK (Solaris Production Release) 1.1.7 B Sun JDK (Solaris Production Release) 1.1.6 Sun JDK (Solaris Production Release) 1.6.0_03 Sun JDK (Solaris Production Release) 1.6.0_02 Sun JDK (Solaris Production Release) 1.6.0_01 Sun JDK (Solaris Production Release) 1.5.0_13 Sun JDK (Solaris Production Release) 1.5.0_12 Sun JDK (Solaris Production Release) 1.5.0_11 Sun JDK (Reference Release) 1.1.8 _009 Sun JDK (Reference Release) 1.1.8 _008 Sun JDK (Reference Release) 1.1.8 _003 Sun JDK (Reference Release) 1.1.7 B_005 Sun JDK (Reference Release) 1.1.6 _007 Sun JDK (Linux Production Release) 1.7 Sun JDK (Linux Production Release) 1.6 _04 Sun JDK (Linux Production Release) 1.6 _01-b06 Sun JDK (Linux Production Release) 1.6 _01 Sun JDK (Linux Production Release) 1.6 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _11-b03 Sun JDK (Linux Production Release) 1.5 _07-b03 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.5 Sun JDK (Linux Production Release) 1.4.2 _14 Sun JDK (Linux Production Release) 1.4.2 _11 Sun JDK (Linux Production Release) 1.4.2 _10 Sun JDK (Linux Production Release) 1.4.2 _09 Sun JDK (Linux Production Release) 1.4.2 _08 Sun JDK (Linux Production Release) 1.4.2 _06 Sun JDK (Linux Production Release) 1.4.2 _05 Sun JDK (Linux Production Release) 1.4.2 Sun JDK (Linux Production Release) 1.4.1 _07 Sun JDK (Linux Production Release) 1.4.1 _01 Sun JDK (Linux Production Release) 1.4.1 Sun JDK (Linux Production Release) 1.3.1 _20 Sun JDK (Linux Production Release) 1.3.1 _18 Sun JDK (Linux Production Release) 1.3.1 _17 Sun JDK (Linux Production Release) 1.3.1 _14 Sun JDK (Linux Production Release) 1.3.1 _01 Sun JDK (Linux Production Release) 1.2.2 _06 Sun JDK (Linux Production Release) 1.2.2 _05 Sun JDK (Linux Production Release) 1.2 Sun JDK (Linux Production Release) 1.1.8 _09 Sun JDK (Linux Production Release) 1.1 Sun JDK (Linux Production Release) 1.6.0_03 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.5.0_13 Sun JDK (Linux Production Release) 1.5.0.0_12 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 Sun Java Plug-In 1.4.2 _02 Sun Java Plug-In 1.4.2 _01 Sun Java Plug-In 1.4 Sun Java Plug-In 1.3.1 Sun Java Plug-In 1.3 _02 Sun Java 2 Standard Edition SDK 1.3.1 _19 Sun Java 2 Standard Edition SDK 1.3.1 .x Sun Java 2 Standard Edition SDK 5.0 Update 12 S.u.S.E. openSUSE 10.2 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc RedHat Red Hat Network Satellite (for RHEL 4) 5.1 RedHat Enterprise Linux Extras 4 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Desktop Supplementary 5 client Gentoo Linux Gentoo dev-java/ibm-jre-bin 1.5.0.6 Gentoo dev-java/ibm-jre-bin 1.4.2.10 Gentoo dev-java/ibm-jdk-bin 1.5.0.6 Gentoo dev-java/ibm-jdk-bin 1.4.2.10 BEA Systems JRockit R27.5.0 BEA Systems JRockit R27.3.1 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable:	Sun SDK (Linux Production Release) 1.4.2 Sun SDK (Linux Production Release) 1.3.1 _22 Sun JRE (Windows Production Release) 1.4.2_17 Sun JRE (Windows Production Release) 1.3.1_22 Sun JRE (Solaris Production Release) 1.4.2_17 Sun JRE (Solaris Production Release) 1.3.1_22 Sun JRE (Linux Production Release) 1.6 _05 Sun JRE (Linux Production Release) 1.5 _15 Sun JRE (Linux Production Release) 1.4.2_17 Sun JRE (Linux Production Release) 1.3.1_22 Sun JDK (Linux Production Release) 1.6 _05 Sun JDK (Linux Production Release) 1.5 _15 Gentoo dev-java/ibm-jre-bin 1.5.0.7 Gentoo dev-java/ibm-jre-bin 1.4.2.11 Gentoo dev-java/ibm-jdk-bin 1.5.0.7 Gentoo dev-java/ibm-jdk-bin 1.4.2.11

Sun Java Runtime Environment Image Parsing Heap Buffer Overflow Vulnerability

Sun Java Runtime Environment is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely crash the application.

This issue affects the following products and versions:

JDK and JRE 6 prior to Update 5
JDK and JRE 5.0 prior to Update 15
SDK and JRE prior to 1.4.2_17
SDK and JRE prior to 1.3.1_22

This vulnerability was previously covered in BID 28083 (Sun Java SE Multiple Security Vulnerabilities), but has been given its own record to better document the issue.

Sun Java Runtime Environment Image Parsing Heap Buffer Overflow Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to run a malicious Java application.
The following proof-of-concept image is available:

• /data/vulnerabilities/exploits/evilicc2.jpg

Sun Java Runtime Environment Image Parsing Heap Buffer Overflow Vulnerability

Solution:
Sun has released security updates to address this issue. Please see the references for details.


Sun JDK 5.0 Update 8

• Sun 118666-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-16-1


• Sun 118667-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-16-1


• Sun 118668-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-16-1


• Sun 118669-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-16-1


• Sun JDK and JRE 5.0 Update 15
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Windows Production Release) 1.4.2_16

• Sun SDK and JRE 1.4.2_17
  http://java.sun.com/j2se/1.4.2/download.html

Sun JDK 5.0 Update 7

• Sun 118666-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-16-1


• Sun 118667-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-16-1


• Sun 118668-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-16-1


• Sun 118669-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-16-1


• Sun JDK and JRE 5.0 Update 15
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE 6.0 Update 2

• Sun JDK and JRE 6 Update 5
  http://java.sun.com/javase/downloads/index.jsp

Sun JDK (Linux Production Release) 1.6 _04

• Sun 125136-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125136-07-1


• Sun 125137-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125137-07-1


• Sun 125138-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125138-07-1


• Sun 125139-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125139-07-1


• Sun JDK and JRE 6 Update 5
  http://java.sun.com/javase/downloads/index.jsp

Sun Java Runtime Environment Image Parsing Heap Buffer Overflow Vulnerability

References:

• Java SE 6 Update 5 Release Notes (Sun Microsystems)
  
• Sun Java Homepage (Sun Microsystems)
  
• Sun JDK image parsing vulnerabilities ('Chris Evans' )
  
• BEA08-201.00: Multiple Security Vulnerabilities in the Java Runtime Environment (BEA Systems)
  
• RHSA-2008:0186-3 java-1.5.0-sun security update (Red Hat)
  
• RHSA-2008:0210-1 - java-1.5.0-ibm security update (Red Hat)
  
• RHSA-2008:0244-2 - Moderate: java-1.5.0-bea security update (Red Hat)
  
• RHSA-2008:0636-4 Red Hat Network Satellite Server Sun Java Runtime security upda (Red Hat)
  
• RHSA-2008:0638-4 Red Hat Network Satellite Server IBM Java Runtime security upda (Red Hat)
  
• Solution 233325 : Vulnerabilties in the Java Runtime Environment image Parsin (Sun)