Java Runtime Environment Buffer Overflows Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1017425
|
|
SecurityTracker URL: http://securitytracker.com/id?1017425
|
|
CVE Reference: CVE-2006-6731
(Links to External Site)
|
Updated: Jan 22 2007
|
Original Entry Date: Dec 20 2006
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Sun Alert
|
Version(s): 5.0 Update 7 and prior versions
|
Description: A vulnerability was reported in Java Runtime Environment (JRE). A remote user can execute arbitrary code on the target system.
A remote user can create a specially crafted Java applet that, when loaded by the target user, will trigger buffer overflows and
gain elevated privileges or execute arbitrary code on the target system.
Sun credits Chris Evans with reporting these vulnerabilities.
The
original advisory is available at:
http://scary.beasts.org/security/CESA-2005-008.txt
|
Impact: A remote user can execute arbitrary code on the target system.
|
Solution: Sun has issued the following fixes (for Windows, Solaris, and Linux):
* JDK and JRE 5.0 Update 8 or later
* SDK and JRE
1.4.2_13 or later
* SDK and JRE 1.3.1_19 or later
JRE 5.0 Update 8 for Solaris was also delivered in the following patches:
* J2SE 5.0: update 8 (as delivered in patch 118666-07)
* J2SE 5.0: update 8 (as delivered in patch 118667-07 (64bit))
* J2SE 5.0_x86: update 8 (as delivered in patch 118668-07)
* J2SE 5.0_x86: update 8 (as delivered in patch 118669-07 (64bit))
The
latest releases for J2SE are available for download at:
J2SE 5.0:
* http://java.sun.com/javase/downloads/index_jdk5.jsp
* http://java.com
J2SE 5.0 Update 9 for Solaris is available in the following patches:
* J2SE 5.0: update 9 (as delivered
in patch 118666-09)
* J2SE 5.0: update 9 (as delivered in patch 118667-09 (64bit))
* J2SE 5.0_x86: update 9 (as delivered
in patch 118668-09)
* J2SE 5.0_x86: update 9 (as delivered in patch 118669-09 (64bit))
J2SE 1.4.2 is available for download
at:
* http://java.sun.com/j2se/1.4.2/download.html
J2SE 1.3.1 is available for download at:
* http://java.sun.com/j2se/1.3/download.html
The
Sun advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1 (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Any), UNIX (Solaris - SunOS), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 20 Dec 2006 01:48:46 -0500
Subject: Security Vulnerabilities in the Java Runtime Environment may Allow Untrusted Applets to Elevate Privileges and Execute Arbitrary Code
|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
|
|
