CVE-2009-1107

Publication date 25 March 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.

Status

Package Ubuntu Release Status
openjdk-6 10.04 LTS lucid
Not affected
9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy Not in release
6.06 LTS dapper Not in release
sun-java5 10.04 LTS lucid Not in release
9.10 karmic Not in release
9.04 jaunty
Not affected
8.10 intrepid Ignored end of life, was needs-triage
8.04 LTS hardy
Not affected
7.10 gutsy Ignored end of life, was needs-triage
6.06 LTS dapper Ignored end of life
sun-java6 10.04 LTS lucid
Fixed 6.20dlj-1ubuntu3
9.10 karmic
Fixed 6.20dlj-0ubuntu1.9.10
9.04 jaunty
Fixed 6.20dlj-0ubuntu1.9.04
8.10 intrepid Ignored end of life, was needs-triage
8.04 LTS hardy
Fixed 6.20dlj-0ubuntu1.8.04
7.10 gutsy Ignored end of life, was needs-triage
6.06 LTS dapper Not in release