Bug 492367 (CVE-2009-0794)

Summary:	CVE-2009-0794 pulse-java integer overflow
Product:	[Other] Security Response	Reporter:	Marc Schoenefeld <mschoene>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	low
Version:	unspecified	CC:	rruss, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-12 03:29:21 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Comment 2 Marc Schoenefeld 2009-04-07 14:31:07 UTC

An integer overflow flaw was found in Pulse-Java when handling "Pulse audio" source data lines. An attacker could use this flaw to cause an applet to crash, leading to a denial of service.

Patch available here:
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2009-February/004729.html

Comment 3 Fedora Update System 2009-04-07 23:22:29 UTC

java-1.6.0-openjdk-1.6.0.0-0.25.b09.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 4 Fedora Update System 2009-04-07 23:22:46 UTC

java-1.6.0-openjdk-1.6.0.0-15.b14.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 6 Kurt Seifried 2015-02-04 20:44:51 UTC

*** Bug 485049 has been marked as a duplicate of this bug. ***