Product: Java Platform, Standard Edition (Java SE)

Two vulnerabilities in the Java Runtime Environment with decoding DER encoded data and parsing HTTP headers may separately allow a remote client to cause the JRE on the server to run out of memory, resulting in a DoS (Denial of Service) condition.

Sun acknowledges with thanks, BFK edv-consulting GmbH, for bringing the first issue to our attention.

State: Resolved
First released: 03-Nov-2009
Permalink |

Comments:

Post a Comment:

Comments are closed for this entry.