Secunia

A vulnerability has been reported in Java allowing malicious users to cause a Denial of Service.

The problem is that some sun classes fail to handle certain parameters properly. One vulnerable class is "sun.misc.MessageUtils.toStdout", which can't handle null objects. This could be exploited by malicious users, who are able to make a Java based application parse a XSL template, to cause a Denial of Service on JVM.

The vulnerability has been reported to affect all current versions of Java.

Solution
Restrict access so that only trusted users can access applications, which parse XSL templates.

Provided and/or discovered by
Marc Schoenefeld

Deep Links
Links available in Customer Area