Java vulnerability details released

Patch now available for GIF processing issue.

A flaw in the GIF processing procedures of Sun Microsystems' Java Virtual Machine, which could allow code to break out of the Java sandbox, has been reported and a patch released.

Advertise on www.virusbtn.com

The flaw, which could allow remote execute of code on a victim machine if exploited accurately, was first discovered over six months ago, and reported to TippingPoint's Zero Day Initiative (ZDI) by an anonymous researcher. The release of details of the flaw follows a patch release from Sun.

The issue is thought to affect several versions of the Java Runtime Environment software, on multiple platforms. The latest version of the software is thought to be already safe from the flaw, users of older versions (version 5 update 9 and earlier) are advised to apply updates as soon as possible. The alert from ZDI is here, with Sun's announcement and links to fixes here.

19 January 2007

Tags:    del.icio.us  digg this! digg this


Poll

How should software and OS patching/security updates be managed?
Manually, at the user's discretion
Automatically via an optional, user-defined schedule
Automatically via a fixed, but optional schedule
Automatically via a fixed schedule, on by default with opt-out system
Automatically and silently, with no option to run unpatched

Leave a comment
View 19 comments

Jobs Career Sidebar

Virus Bulletin

In this month's magazine:
  • Same malware, different code
  • Can you spare a seg?
  • Kernel mechanics of Rustock
  • Early warning approaches to combat typosquatting
  • The challenges of collecting and monitoring URLs that point to malware
  • Norman Network Protection Appliance
  • Anti-spam comparative review July 2009
Virus Bulletin 07 2009
Subscribe now!
Virus Bulletin currently has 165,684 registered users.