Java vulnerability details released
Patch now available for GIF processing issue.
A flaw in the GIF processing procedures of Sun Microsystems' Java Virtual Machine, which could allow code to break out of the Java sandbox, has been reported and a patch released.
The flaw, which could allow remote execute of code on a victim machine if exploited accurately, was first discovered over six months ago, and reported to TippingPoint's Zero Day Initiative (ZDI) by an anonymous researcher. The release of details of the flaw follows a patch release from Sun.
The issue is thought to affect several versions of the Java Runtime Environment software, on multiple platforms. The latest version of the software is thought to be already safe from the flaw, users of older versions (version 5 update 9 and earlier) are advised to apply updates as soon as possible. The alert from ZDI is here, with Sun's announcement and links to fixes here.
19 January 2007
Tags:
del.icio.us
digg this
Poll
Will the current banking crisis lead to an increase in phishing attacks?Leave a comment
Jobs
In Virus Bulletin's jobs pages among others:- Customer Care Tier 2 (San Diego, California, United States)
- Customer Care Tier I (San Diego, California, United States)
Virus Bulletin currently has 137,981 registered users.

