Some vulnerabilities have been reported in JRockit, which can be exploited by malicious people to bypass certain security restrictions or to compromise a vulnerable system.

1) Some errors in BEA JRockit can be exploited to compromise a vulnerable system.

For more information:
SA23445

2) An error in the processing of GIF images can be exploited to compromise a vulnerable system

For more information:
SA23757

3) An error within the use of system classes can be exploited by a non-trusted application to gain escalated privileges.

For more information:
SA25069

The vulnerabilities affect releases prior to BEA JRockit R26.0.0 1.4.2_07 and BEA JRockit R26.0.0 1.5.0_04.

Solution
Apply patches or update to the latest version (see vendor advisories for details).

Provided and/or discovered by
Reported by the vendor.

Original Advisory
1) http://dev2dev.bea.com/pub/advisory/240, http://dev2dev.bea.com/pub/advisory/243
2) http://dev2dev.bea.com/pub/advisory/242
3) http://dev2dev.bea.com/pub/advisory/241

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area