Bug#431831: sun-java5-jdk: Integer overflow in ICC profile parser allows execution of arbitrary code

2007-07-05 Thread Sam Morris
On Thu, 2007-07-05 at 13:05 +0200, Matthias Klose wrote: > tags 431831 + pending > thanks > > when do people start checking the NEW queue before filing bogus reports? I wasn't aware that security updates for stable generally went through NEW. Furthermore, the only entry that I see there for Sun's

Bug#431831: sun-java5-jdk: Integer overflow in ICC profile parser allows execution of arbitrary code

2007-07-05 Thread Matthias Klose
tags 431831 + pending thanks when do people start checking the NEW queue before filing bogus reports? Sam Morris schrieb: > Package: sun-java5-jdk > Version: 1.5.0-10-3 > Severity: grave > Tags: security > Justification: user security hole > > Integer overflow in the embedded ICC profile image p

Bug#431831: sun-java5-jdk: Integer overflow in ICC profile parser allows execution of arbitrary code

2007-07-05 Thread Sam Morris
Package: sun-java5-jdk Version: 1.5.0-10-3 Severity: grave Tags: security Justification: user security hole Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03, and 1.6.x before 1.6.0_01-b06, allows remote attackers to execute arbitrary c