|
Sun JRE applet-håndteringssårbarhed
|
|
|
|
|
Secunia Advisory:
|
SA27320
|
|
|
Udsendt:
|
2007-10-23
|
|
Sidste Opdt.:
|
2007-10-30
|
|
|
Kritisk:
|
Meget kritisk
|
|
Betydning:
|
Systemadgang
|
|
Hvor:
|
Fra Internet
|
|
Løsning Status:
|
Producent Patch
|
|
| Software: | Sun Java JDK 1.5.x
Sun Java JDK 1.6.x
Sun Java JRE 1.3.x
Sun Java JRE 1.4.x
Sun Java JRE 1.5.x / 5.x
Sun Java JRE 1.6.x / 6.x
Sun Java SDK 1.3.x
Sun Java SDK 1.4.x
|
| | CVE reference: | CVE-2007-5689 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Beskrivelse:
Der er rapporteret en sårbarhed i Sun JRE, som kan udnyttes af ondsindede personer til at kompromittere en brugers system.
Sårbarheden skyldes en uspecificeret fejl under håndteringen af Java-applets. Dette kan udnyttes af ondsindede, untrusted applets til at læse og skrive til lokale filer samt eksekvere lokale programmer.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector.
Løsning:
Opdatér til de seneste versioner, eller installér patches.
JDK and JRE 6 Update 3 or later
http://java.sun.com/javase/downloads/index.jsp
JDK and JRE 5.0 Update 13 or later:
http://java.sun.com/javase/downloads/index_jdk5.jsp
SDK and JRE 1.4.2_16 or later:
http://java.sun.com/j2se/1.4.2/download.html
SDK and JRE 1.3.1_21 or later (Windows and Solaris 8 only):
http://java.sun.com/j2se/1.3/download.html
JDK 6 Update 3 for Solaris is also available in the following patches:
* Java SE 6 Update 3 (as delivered in patch 125136-04 or later)
* Java SE 6 Update 3 (as delivered in patch 125137-04 or later (64bit))
* Java SE 6_x86 Update 3 (as delivered in patch 125138-04 or later)
* Java SE 6_x86 Update 3 (as delivered in patch 125139-04 or later (64bit))
JDK 5.0 Update 13 for Solaris is also available in the following patches:
* J2SE 5.0 Update 13 (as delivered in patch 118666-14)
* J2SE 5.0 Update 13 (as delivered in patch 118667-14 (64bit))
* J2SE 5.0_x86 Update 13 (as delivered in patch 118668-14)
* J2SE 5.0_x86 Update 13 (as delivered in patch 118669-14 (64bit))
Rapporteret af / Kredit:
Producenten krediterer Azul Systems.
Forløb:
30-10-2007: Tilføjede CVE-reference.
Original Advisory:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103112-1
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
42 Relaterede Secunia Advisories, displaying 10
|
|
|
1. Sun Java JRE flere sårbarheder
|
|
2. Sun JRE font-fortolkningssårbarhed
|
|
3. Sun Java JRE/JDK XSLT-stylesheets i XML-signaturer sårbarhed
|
|
4. Java JRE/JDK flere sårbarheder
|
|
5. Sun Java Web Start JNLP fil-håndtering buffer overflow
|
|
6. Sun Java Web Start overskrivning af vilkårlige filer
|
|
7. Sun JDK JavaDoc cross-site scripting
|
|
8. Sun JDK ICC og BMP-fortolker sårbarheder
|
|
9. Java 2 Platform rettighedseskalering
|
|
10. Sun Java JRE GIF-billedhåndtering buffer overflow
|
Vis alle relaterede advisories
|
|
|
Send Feedback to Secunia
|
|
Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com.
Ideer, foreslag og andet feedback er også meget velkommen.
|
|
|
|
