title: Red Hat Security Advisory: java-1.6.0-ibm security update
description: Java WebStart privilege escalation Java Web Start exposes username and the pathname of the JWS cache Java Web Start BasicService displays local files in the browser Java WebStart allows hidden code privilege escalation OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841) OpenJDK Font processing vulnerability (6733336) OpenJDK Truetype Font processing vulnerability (6751322) OpenJDK Buffer Overflow in GIF image processing (6766136)
cpes: cpe:/a:redhat:rhel_extras:4 cpe:/a:redhat:rhel_extras:5::client cpe:/a:redhat:rhel_extras:5::server