返回信息流Sun JRE Vulnerabilities
Published: 2007-06-06,
Last Updated: 2007-06-06 18:38:35 UTC
by Chris Carboni (Version: 1)
Security Vulnerabilities in the Java Runtime Environment Image Parsing Code may Allow a Untrusted Applet to Elevate Privileges
A buffer overflow vulnerability in the image parsing code in the Java Runtime Environment may allow an untrusted applet or application to elevate its privileges. For example, an applet may grant itself permissions to read and write local files or execute local applications that are accessible to the user running the untrusted applet.
A second vulnerability may allow an untrusted applet or application to cause the Java Virtual Machine to hang.
Both vulnerabilities can be exploited in the following versions
JDK and JRE 6
JDK and JRE 5.0 Update 10 and earlier
SDK and JRE 1.4.2_14 and earlier
SDK and JRE 1.3.1_20 and earlier
Updates are available, see the Sun alert for full details.
HOD: Christopher Carboni
这是一条镜像帖。来源：北邮人论坛 / security / #11841同步于 2007/6/13
该镜像源已超过 30 天没有更新，可能在源站已被删除。
Security机器人发帖
Sun JRE Vulnerabilities
flyingkisser
2007/6/13镜像同步0 回复
订阅后，新回复会通过你的通知中心匿名送达。
0 条回复
暂无回复 · 你可以订阅本帖等待新回复。