Bug 639897 (CVE-2010-3562) - CVE-2010-3562 OpenJDK IndexColorModel double-free (6925710)
Summary: CVE-2010-3562 OpenJDK IndexColorModel double-free (6925710)
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2010-3562
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 639951 639952 639953 639954 642515 642517 643336 643337 643338 643355 643356 643357 646406 646407 646408 662638 662639 662640
Blocks: 712887
TreeView+ depends on / blocked
 
Reported: 2010-10-04 10:03 UTC by Marc Schoenefeld
Modified: 2019-09-29 12:39 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-08-23 13:32:27 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2010:0768 0 normal SHIPPED_LIVE Important: java-1.6.0-openjdk security and bug fix update 2010-10-13 16:23:43 UTC
Red Hat Product Errata RHSA-2010:0770 0 normal SHIPPED_LIVE Critical: java-1.6.0-sun security update 2010-10-14 13:35:50 UTC
Red Hat Product Errata RHSA-2010:0786 0 normal SHIPPED_LIVE Critical: java-1.4.2-ibm security update 2010-10-20 17:14:58 UTC
Red Hat Product Errata RHSA-2010:0807 0 normal SHIPPED_LIVE Critical: java-1.5.0-ibm security update 2010-10-27 23:07:22 UTC
Red Hat Product Errata RHSA-2010:0865 0 normal SHIPPED_LIVE Important: java-1.6.0-openjdk security and bug fix update 2010-11-09 19:05:39 UTC
Red Hat Product Errata RHSA-2010:0873 0 normal SHIPPED_LIVE Critical: java-1.5.0-ibm security update 2010-11-10 12:10:54 UTC
Red Hat Product Errata RHSA-2010:0986 0 normal SHIPPED_LIVE Moderate: java-1.4.2-ibm-sap security update 2010-12-15 22:43:51 UTC
Red Hat Product Errata RHSA-2010:0987 0 normal SHIPPED_LIVE Critical: java-1.6.0-ibm security and bug fix update 2010-12-15 23:45:15 UTC
Red Hat Product Errata RHSA-2011:0880 0 normal SHIPPED_LIVE Low: Red Hat Network Satellite server IBM Java Runtime security update 2011-06-16 19:21:49 UTC

Comment 2 Jan Lieskovsky 2010-10-13 15:24:00 UTC 
Double free in IndexColorModel could cause an untrusted applet or application
to crash or, possibly, execute arbitrary code with the privileges of the user
running the applet or application. (CVE-2010-3562) 

The CVSSv2 scored upstream is
cvss2=7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P

Reference: 
http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
Comment 3 errata-xmlrpc 2010-10-13 16:23:54 UTC 
This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2010:0768 https://rhn.redhat.com/errata/RHSA-2010-0768.html
Comment 4 errata-xmlrpc 2010-10-14 13:36:35 UTC 
This issue has been addressed in following products:

  Extras for RHEL 4
  Extras for Red Hat Enterprise Linux 5

Via RHSA-2010:0770 https://rhn.redhat.com/errata/RHSA-2010-0770.html
Comment 8 errata-xmlrpc 2010-10-20 17:15:17 UTC 
This issue has been addressed in following products:

  Extras for RHEL 3
  Extras for RHEL 4
  Extras for Red Hat Enterprise Linux 5

Via RHSA-2010:0786 https://rhn.redhat.com/errata/RHSA-2010-0786.html
Comment 10 errata-xmlrpc 2010-10-27 23:07:38 UTC 
This issue has been addressed in following products:

  Extras for RHEL 4
  Extras for Red Hat Enterprise Linux 5

Via RHSA-2010:0807 https://rhn.redhat.com/errata/RHSA-2010-0807.html
Comment 11 errata-xmlrpc 2010-11-10 18:49:42 UTC 
This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2010:0865 https://rhn.redhat.com/errata/RHSA-2010-0865.html
Comment 12 errata-xmlrpc 2010-11-10 19:07:08 UTC 
This issue has been addressed in following products:

  Extras for Red Hat Enterprise Linux 6

Via RHSA-2010:0873 https://rhn.redhat.com/errata/RHSA-2010-0873.html
Comment 14 errata-xmlrpc 2010-12-15 22:44:04 UTC 
This issue has been addressed in following products:

  RHEL 4 for SAP
  RHEL 5 for SAP
  RHEL 6 for SAP

Via RHSA-2010:0986 https://rhn.redhat.com/errata/RHSA-2010-0986.html
Comment 15 errata-xmlrpc 2010-12-15 23:45:38 UTC 
This issue has been addressed in following products:

  Extras for RHEL 4
  Extras for Red Hat Enterprise Linux 5
  Extras for Red Hat Enterprise Linux 6

Via RHSA-2010:0987 https://rhn.redhat.com/errata/RHSA-2010-0987.html
Comment 16 errata-xmlrpc 2011-06-16 19:22:17 UTC 
This issue has been addressed in following products:

  Red Hat Network Satellite Server v 5.4

Via RHSA-2011:0880 https://rhn.redhat.com/errata/RHSA-2011-0880.html
Note You need to log in before you can comment on or make changes to this bug.