Secunia

A vulnerability has been reported in Sun Java Runtime Environment (JRE), which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error when processing GIF images and can be exploited to cause a heap-based buffer overflow via a specially crafted GIF image with an image width of 0.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in the following versions:
* JDK and JRE 5.0 Update 9 and prior.
* SDK and JRE 1.4.2_12 and prior.
* SDK and JRE 1.3.1_18 and prior.

Solution
Updated to fixed versions.
Further details available in Customer Area

Provided and/or discovered by
Discovered by an anonymous person and reported via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
Sun Microsystems:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-005.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area