QID 198691

Openjdk incorrectly handled deserialization filters.
Openjdk incorrectly read uncompressed tiff files.
Openjdk incorrectly verified accessrestrictions when performing uri resolution.
Openjdk incorrectly handled certain regularexpressions in the pattern class implementation.
Openjdk incorrectly handled specially crafted javaclass files.
Openjdk incorrectly validated attributesduring object deserialization.
Openjdk incorrectly verified access permissionsin the jaxp component.
Openjdk incorrectly handled xml entities.
Openjdk incorrectly handled array indexes.
Openjdk incorrectly read very long attributesvalues in jar file manifests.
Openjdk incorrectly validated input from serializedstreams.
Openjdk incorrectly handled certainspecially crafted bmp or tiff files.
An integer overflow could be triggered in openjdkbmpimagereader class implementation.

An attacker could possibly use this issue to insert, delete or obtainsensitive information.
An attacker could possibly use this issue to cause a denial of service viaa specially crafted tiff file.
An attacker could possiblyuse this issue to obtain sensitive information.
An attacker couldpossibly use this issue to cause a denial of service.
An attacker could possibly use this issue to cause a denialof service.
An attacker could possibly use this issueto cause a denial of service.
An attacker could possibly use this to speciallycraft an xml file to obtain sensitive information.
Anattacker could use this to specially craft an xml file that, when parsed,would possibly cause a denial of service.
An attacker could possibly use this issue to obtain sensitive information.
An attacker could possibly use this tospecially craft jar file to cause a denial of service.
An attacker cold possibly use this issue to bypass sandboxrestrictions.
An attacker could possibly use thisto cause a denial of service.
An attacker could possibly use thisto specially craft a bmp file to cause a denial of service.