what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 1 of 1 RSS Feed

Files

Zero Day Initiative Advisory 10-204
Posted Oct 13, 2010
Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 10-204 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle's Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the implementation of the color profile parser. When processing a the 'devs' tag structure out of a color profile, the parser will read a 32-bit integer and use it to calculate the size for a memory allocation. Due to the result being larger than 32 bits, an integer overflow will occur. This will lead to code execution under the context of the application.

tags | advisory, java, remote, overflow, arbitrary, code execution
advisories | CVE-2010-3566
SHA-256 | 4568924430cdde5ee71ad85ef960d3f36d89d2816b3de7d6519e3d8687feceb4
Page 1 of 1
Back1Next

Top Authors In Last 30 Days

Recent News

News RSS Feed
China Is Digging A Big Frickin' Hole 33,000 Feet Into The Earth
Posted Jun 2, 2023

tags | headline, government, china, science
Researchers Tell Owners To Assume Compromise Of Unpatched Zyxel Firewalls
Posted Jun 1, 2023

tags | headline, hacker, flaw, backdoor
War Crimes Evidence Erased By Social Media Firms
Posted Jun 1, 2023

tags | headline, government, data loss, cyberwar, social, military
New Vulnerability Gives MacOS Users A Migraine
Posted Jun 1, 2023

tags | headline, flaw, apple
Amazon To Pay $30.8M For Alexa And Ring Privacy Violations
Posted Jun 1, 2023

tags | headline, government, privacy, usa, amazon, data loss
Russia Says U.S. Accessed Thousands Of Apple Phones In Spy Plot
Posted Jun 1, 2023

tags | headline, government, usa, phone, russia, cyberwar, spyware, apple
Organizations Warned Of Backdoor In Hundreds Of Gigabyte Motherboards
Posted May 31, 2023

tags | headline, hacker, microsoft, flaw, backdoor
XFS Bug In Linux Kernel 6.3.3 Coincides With SGI Code Comebank
Posted May 31, 2023

tags | headline, linux, flaw
Cyberwar Manufacturers Plot To Stay On Right Side Of US
Posted May 31, 2023

tags | headline, government, malware, usa, cyberwar, spyware
Critical Barracuda 0-Day Was Used To Backdoor Networks For 8 Months
Posted May 31, 2023

tags | headline, hacker, data loss, flaw, backdoor
View More News →
packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close