Sun JRE Security Issue

Netscape Security News - Sun JRE (Java Runtime Environment) Issue

Sun Microsystems, Inc. Security Bulletin

Bulletin Number: #00220
Date: November 19, 2002
Cross-Ref: http://www.cert.org/advisories/CA-2002-07.html
Title: Double Free bug in zlib compression library

CERT has reported a bug in the zlib compression library

Sun's implementations of the Java(TM) Runtime Environment
include zlib and are affected. This bug may allow malicious code
to corrupt memory and possibly crash the Java Runtime Environment.

The full and custom installations of Netscape 7 for Linux
and the full and custom installations of Netscape 6 for Linux and
Windows are affected since they include an affected version of the
Java Runtime Environment. The default Java runtime environment of
Netscape 7 for Windows is not affected. The default Java runtime
environment of Netscape(TM) Communicator version 4.x is also
not affected.

 

Just wanted to add,

That would be "Java 2 Runtime Environment, SE v1.4.0_01" from what I've gathered from the Netscape 7 release notes and elsewhere....

So, if you see that, or higher, in Control Panel Add/Remove programs, you're OK.