Upstream information

CVE-2009-1102 at MITRE

Description

Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 6.4
Vector AV:N/AC:L/Au:N/C:P/I:P/A:N
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact None
SUSE Bugzilla entry: 488926 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 11 GA
  • java-1_6_0-sun >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-alsa >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-demo >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-jdbc >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-plugin >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-src >= 1.6.0.u13-0.1.1
sle11-debuginfo.x86-64
sled11.x86-64
sle11-debuginfo.x86
sled11.x86
SAT Patch Nr: 699
openSUSE 11.0
  • java-1_6_0-sun >= 1.6.0.u13-0.1
  • java-1_6_0-sun-alsa >= 1.6.0.u13-0.1
  • java-1_6_0-sun-demo >= 1.6.0.u13-0.1
  • java-1_6_0-sun-devel >= 1.6.0.u13-0.1
  • java-1_6_0-sun-jdbc >= 1.6.0.u13-0.1
  • java-1_6_0-sun-plugin >= 1.6.0.u13-0.1
  • java-1_6_0-sun-src >= 1.6.0.u13-0.1
openSUSE 11.1
  • java-1_6_0-sun >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-alsa >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-devel >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-jdbc >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-plugin >= 1.6.0.u13-0.1.1
  • java-1_6_0-sun-src >= 1.6.0.u13-0.1.1