Overview

Advisories

Research

Forums

Create Profile

Our Commitment

All Threads

PSI

PSI API

CSI

OSI

xSI

Vulnerabilities

Programs

Open Discussions

My Threads

Create Thread

Statistics

About

Forum Thread: Oracle Java SE Multiple Vulnerabilities

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Vulnerabilities

See the original Secunia advisory:
Oracle Java SE Multiple Vulnerabilities

Secunia	Oracle Java SE Multiple Vulnerabilities
	16th Feb, 2012 11:02
Ranking: 0 Posts: 0 User Since: - System Score: - Location: Copenhagen, DK	Multiple vulnerabilities have been reported in Oracle Java SE, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system. 1) An error in the 2D component may allow execution of arbitrary code in a client and server deployment via e.g untrusted applets or data sent to APIs through a web service. 2) Another error in the 2D component may allow execution of arbitrary code in a client and server deployment via e.g untrusted applets or data sent to APIs through a web service. 3) Another error in the 2D component may allow execution of arbitrary code in a client and server deployment via e.g untrusted applets or data sent to APIs through a web service. 4) An error in the Deployment component may allow execution of arbitrary code in a client deployment via e.g untrusted Web Start applications or untrusted applets. 5) An error in the JavaFX component may allow execution of arbitrary code in a client deployment. 6) An error in the Install component may allow execution of arbitrary code in a client deployment via the update mechanism. This may be related to: SA47134 7) An error in the Concurrency component can be exploited to disclose and manipulate certain data and to cause a DoS in a client deployment via e.g. untrusted Web Start applications or untrusted applets. 8) An error in the I18n component can be exploited to disclose and manipulate certain data and to cause a DoS in a client deployment via e.g. untrusted Web Start applications or untrusted applets. 9) An error in the Serialization component can be exploited to disclose and manipulate certain data and to cause a DoS in a client deployment via e.g. untrusted Web Start applications or untrusted applets. 10) An error in the AWT component can be exploited to disclose certain data and cause a DoS in a client deployment via e.g. untrusted Web Start applications or untrusted applets. 11) An error in the Sound component can be exploited to disclose certain data and cause a DoS in a client deployment via e.g. untrusted Web Start applications or untrusted applets. 12) An error in the Lightweight HTTP Server can be exploited to cause a DoS. For more information: SA47819 13) An error in the Java Runtime Environment component can be exploited to cause a DoS in a client and server deployment via e.g untrusted applets or data sent to APIs through a web service. 14) An error in the CORBA component can be exploited to manipulate certain data in a client deployment via e.g. untrusted Web Start applications or untrusted applets.

loungehaddock	RE: Oracle Java SE Multiple Vulnerabilities
	16th Feb, 2012 11:02
Score: 0 Posts: 2 User Since: 16th Feb 2012 System Score: N/A Location: UK Last edited on 16th Feb, 2012 11:02	JRE 6.31 crashes the Opera web browser 11.61 in Windows. There seems to be no way of letting oracle.com know about this so impenetrable is its defences.
Was this reply relevant? +2 -2

ddmarshall	RE: Oracle Java SE Multiple Vulnerabilities
	16th Feb, 2012 11:18
Score: 1126 Posts: 910 User Since: 8th Nov 2008 System Score: 100% Location: UK	It's probably easier to tell Opera http://www.opera.com/support/ -- This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant? +3 -0

taffy078	RE: Oracle Java SE Multiple Vulnerabilities
	17th Feb, 2012 16:05
Score: 399 Posts: 1,200 User Since: 26th Feb 2009 System Score: 100% Location: UK	Hi lounge haddock - we're not supposed to post here. Please take a peek at http://secunia.com/community/forum/thread/show/121... I hope that resolves your problem. -- taffy078, West Yorkshire, UK Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003 Laptop: Win 7 / IE9 / PSI v2.0.0.3003
Was this reply relevant? +0 -0

uknorthtiffany	RE: Oracle Java SE Multiple Vulnerabilities	[+]
This reply has been deleted