Java vulnerability details released

Patch now available for GIF processing issue.

A flaw in the GIF processing procedures of Sun Microsystems' Java Virtual Machine, which could allow code to break out of the Java sandbox, has been reported and a patch released.

Advertise on www.virusbtn.com

The flaw, which could allow remote execute of code on a victim machine if exploited accurately, was first discovered over six months ago, and reported to TippingPoint's Zero Day Initiative (ZDI) by an anonymous researcher. The release of details of the flaw follows a patch release from Sun.

The issue is thought to affect several versions of the Java Runtime Environment software, on multiple platforms. The latest version of the software is thought to be already safe from the flaw, users of older versions (version 5 update 9 and earlier) are advised to apply updates as soon as possible. The alert from ZDI is here, with Sun's announcement and links to fixes here.

19 January 2007

Tags:    del.icio.us  digg this! digg this

Quick Links



Poll

When do you install software updates?
As soon as they are released
As soon as I have some time
I take my time, but I always install them eventually
Only when I feel it is absolutely necessary
Never
Leave a comment
View 12 comments

Jobs Recruit Sidebar

Twitter Feed

virusbtn: RT @emailsecmatters: The typical spam message has sources as diverse as the spam lunch meat: http://ht.ly/2yucd
2 hours ago


virusbtn: Can anyone write a rap about our RAP tests (http://bit.ly/255ySQ) and submit it to the Symantec competition http://bit.ly/bOJg8r
6 hours ago


VB2010

VB2010 VB2010 will take place 29 September - 1 October 2009 at the Westin Bayshore, Vancouver, BC, Canada.
Virus Bulletin currently has 208,232 registered users.