Sun Java JRE GIF Image Processing Buffer Overflow Vulnerability

For small-news.com NEW website click here

January 22nd, 2007

Small-News has Move on a News Hosting, all News have Been Moved, Please Click Small-news to Visit Our New Website

Its is noted Highly critical
A vulnerability has been reported in Sun Java Runtime Environment (JRE), which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error when processing GIF images and can be exploited to cause a heap-based buffer overflow via a specially crafted GIF image with an image width of 0.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in the following versions:
* JDK and JRE 5.0 Update 9 and prior.
* SDK and JRE 1.4.2_12 and prior.
* SDK and JRE 1.3.1_18 and prior.
Solution:
Updated to fixed versions.

JDK and JRE 5.0:
Update to JDK and JRE 5.0 Update 10 or later.
http://java.sun.com/javase/downloads/index_jdk5.jsp
Source:Secunia

Get Mp3 Player @ Mp3 Player Store Uk or Mp3 Player Store USA @ Bargain Prices

Technorati Tags: Secunia, Java, Buffer Overflow, Sun Java Runtime Environment

Share This |

Post

Blog

Google Search

Possibly Related Post

AOL CDDBControl ActiveX Control “SetClientInfo()” Buffer Overflow

Secunia today reveal a critical AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow."Secunia Research has discovered a vulnerability in AOL, which can be exploited by malicious people to compromise a user's system. The vulnerability is...

Microsoft Internet Explorer Vector Markup Language Buffer Overflow Vulnerability

Risk High Date Discovered 9/19/2006 12:00:00 AM Description Microsoft Internet Explorer is prone to a buffer-overflow vulnerability. The vulnerability arises because of an error in the processing of Vector Markup Language documents. An attac...

JAVA

According to Reuters Sun Microsystems will make its Java software available for free by giving it to the open-source community, though it will continue to sell and support standardised versions of the product. Link:JAVA TAG: JAVA ...