exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Sun Java JDK/JRE AWT Library Invalid Index

Sun Java JDK/JRE AWT Library Invalid Index
Posted Apr 1, 2010
Authored by Alexandre Pelletier | Site vupen.com

VUPEN Vulnerability Research Team discovered a vulnerability in Sun Java JDK/JRE. The flaw is caused by an invalid index within the AWT (Abstract Windowing Toolkit) library when processing data passed to a specific function, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.

tags | advisory, java, web, arbitrary
SHA-256 | 6c8d3a63e32e5f2840ce7be944632c7b017a9f64bbd7d2f0603ffdd07e654454

Sun Java JDK/JRE AWT Library Invalid Index

Change Mirror Download
VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index 
Vulnerability

http://www.vupen.com/english/research.php


I. BACKGROUND
---------------------

"Java is a programming language and computing platform released by
Sun Microsystems. It is the underlying technology that powers
state-of-the-art programs including utilities, games, and business
applications.

Java runs on more than 850 million personal computers worldwide,
and on billions of devices worldwide, including mobile and TV devices."


II. DESCRIPTION
---------------------

VUPEN Vulnerability Research Team discovered a vulnerability in
Sun Java JDK/JRE.

The flaw is caused by an invalid index within the AWT (Abstract
Windowing Toolkit) library when processing data passed to a specific
function, which could be exploited by attackers to execute arbitrary
code by tricking a user into visiting a specially crafted web page.


III. AFFECTED PRODUCTS
--------------------------------

Sun Java JDK version 6 Update 18 and prior
Sun Java JDK version 5.0 Update 23 and prior
Sun Java JRE version 6 Update 18 and prior
Sun Java JRE version 5.0 Update 23 and prior
Sun Java JRE version 1.4.2_25 and prior
Sun Java SDK version 1.4.2_25 and prior


IV. Exploits - PoCs & Binary Analysis
----------------------------------------

In-depth binary analysis of the vulnerability and a proof-of-concept
have been released by VUPEN through the VUPEN Binary Analysis
& Exploits Service :

http://www.vupen.com/exploits


V. SOLUTION
----------------

Upgrade to Sun Java JDK and JRE 6 Update 19, JDK and JRE 5.0 Update 24,
and JRE and SDK version 1.4.2_26 :
http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html


VI. CREDIT
--------------

The vulnerability was discovered by Alexandre Pelletier of VUPEN Security


VII. ABOUT VUPEN Security
---------------------------------

VUPEN is a leading IT security research company providing vulnerability
management and security intelligence solutions which enable enterprises
and institutions to eliminate vulnerabilities before they can be exploited,
ensure security policy compliance and meaningfully measure and manage risks.

Governmental and federal agencies, and global enterprises in the financial
services, insurance, manufacturing and technology industries rely on VUPEN
to improve their security, prioritize resources, cut time and costs, and
stay ahead of the latest threats.

* VUPEN Vulnerability Notification Service:

http://www.vupen.com/english/services

* VUPEN Binary Analysis & Exploits Service :

http://www.vupen.com/exploits


VIII. REFERENCES
----------------------

http://www.vupen.com/english/advisories/2010/0747
http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html



IX. DISCLOSURE TIMELINE
-----------------------------------

2009-11-20 - Vendor notified
2009-11-24 - Vendor response
2010-01-09 - Status update received
2010-03-03 - Status update received
2010-03-31 - Coordinated public Disclosure


Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    0 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close