Java 6 Update 17 fixes multiple security vulnerabilities

[Peaches]

4 November 2009, 12:02

Java 6 Update 17 fixes multiple security vulnerabilities Sun Microsystems has released Java 6 Update 17, which fixes multiple security vulnerabilities. These include various buffer and integer overflows triggered by crafted audio and image files, which can be exploited by Java applets and 'Java Web Start' applications to escalate their privileges and allow system infection. A bug in the 'Java Web Start' installer can result in non-trusted Web Start applications being run as trusted applications and therefore obtaining escalated privileges. A vulnerability in the Java Runtime Environment Deployment Toolkit allows websites to inject and execute code.

Heise security for further details - http://www.h-online.com/security/news/item/Java-6-Update-17-fixes-multiple-security-vulnerabilities-849789.html