Java flaw poses widespread security threat

TalkBack 45 of 47:

Next »

« Previous

• Thread View
• Flat View

is is this Sun advisory???... (so many to choose from)

Sourcing ?

?- http://blogs.sun.com/security/

with full attribution, is it this announcement???... (It's JRE-related and atta-boy's G-sec.)

(10 Jul 2007 Sun Alert 102934 Security Vulnerabilities in the Java Runtime Environment Image Parsing Code May Allow a Untrusted Applet to Elevate Privileges

posted by Sun Security Coordination Team in Alerts

Product: Java 2 Platform, Standard Edition

A buffer overflow vulnerability in the image parsing code in the Java Runtime Environment may allow an untrusted applet or application to elevate its privileges. For example, an applet may grant itself permissions to read and write local files or execute local applications that are accessible to the user running the untrusted applet.

A second vulnerability may allow an untrusted applet or application to cause the Java Virtual Machine to hang.

Sun acknowledges, with thanks, Chris Evans of the Google Security Team, for bringing these issues to our attention.

These issues are also referenced in the following documents:

CVE-2007-2788 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2788

CVE-2007-2789 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2789

Avoidance: Patch, Upgrade
State: Resolved
First released: 31-May-2007
Sun Alert Link: http://sunsolve.sun.com/search/<ocument.do?assetkey=1-26-102934-1
Permalink | Comments [0]

Posted by: wti   Posted on: 07/13/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Using Red Hat Enterprise Linux AS to Achieve Highly Available, Load-Balanced Clusters Dell The Red Hat Enterprise Linux AS operating system integrates Cluster ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now