CVE-2011-0815

Publication date 14 June 2011

Last updated 24 July 2024

Ubuntu priority

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to AWT.

From the Ubuntu Security Team

It was discovered that a heap overflow in the AWT FileDialog.show() method could allow an attacker cause a denial of service through an application crash or possibly execute arbitrary code.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
icedtea-web	11.10 oneiric	Not affected
	11.04 natty	Not affected
	10.10 maverick	Not in release
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not in release
openjdk-6	11.10 oneiric	Not affected
	11.04 natty	Fixed 6b22-1.10.2-0ubuntu1~11.04.1
	10.10 maverick	Fixed 6b20-1.9.8-0ubuntu1~10.10.1
	10.04 LTS lucid	Fixed 6b20-1.9.8-0ubuntu1~10.04.1
	8.04 LTS hardy	Fixed 6b27-1.12.3-0ubuntu1~08.04.1
openjdk-6b18	11.10 oneiric	Fixed 6b18-1.8.8-0ubuntu1~11.04.1
	11.04 natty	Fixed 6b18-1.8.8-0ubuntu1~11.04.1
	10.10 maverick	Fixed 6b18-1.8.8-0ubuntu1~10.10.1
	10.04 LTS lucid	Fixed 6b18-1.8.8-0ubuntu1~10.04.1
	8.04 LTS hardy	Not in release
sun-java5	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Not in release
	8.04 LTS hardy	Ignored end of life
sun-java6	11.10 oneiric	Not in release
	11.04 natty	Fixed 6.26-1natty
	10.10 maverick	Fixed 6.26-1maverick1
	10.04 LTS lucid	Fixed 6.26-1lucid1
	8.04 LTS hardy	Ignored end of life

CVE-2011-0815

From the Ubuntu Security Team

Status

Notes

mdeslaur

References

Related Ubuntu Security Notices (USN)

Other references