A vulnerability has been reported in Spring Framework, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the mechanism used to update the properties of an object with client provided data. This can be exploited to e.g. overwrite the "repositoryURLs" property of the "WebappClassLoader" and load a malicious jar file.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in the following versions:
* 3.0.0 through 3.0.2
* 2.5.0 through 2.5.6.SEC01 (community releases)
* 2.5.0 through 2.5.7 (subscription customers)

Solution
Update to the latest versions.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Meder Kydyraliev, Google Security Team.

Original Advisory
http://www.springsource.com/security/cve-2010-1622

Deep Links
Links available to Secunia VIM customers