Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Sun Microsystems JRE untrusted applet restricted resource access vulnerability

Sun Microsystems JRE untrusted applet restricted resource access vulnerability

by Mario Miri on July 22nd, 2003 Java Runtime Engine does not properly restrict access to some resources which may be exploited with a malicious applet to access those resources.



Vulnerable:
Sun JDK (Reference Release) 1.1.8 _008
Sun JDK (Solaris Production Release) 1.1.8 _14
Sun JDK (Windows Production Release) 1.1.6 _009
Sun JDK (Windows Production Release) 1.1.6 _007
Sun JDK (Windows Production Release) 1.1.7 B_007
Sun JDK (Windows Production Release) 1.1.7 B_005
Sun JDK (Windows Production Release) 1.1.8 _008
Sun JDK (Windows Production Release) 1.1.8 _007
Sun JDK (Windows Production Release) 1.1.8 _007
Sun JDK (Windows Production Release) 1.1.8 _005
Sun JDK (Windows Production Release) 1.1.8 _002
Sun JRE (Linux Production Release) 1.2.2 _010
Sun JRE (Linux Production Release) 1.2.2 _007
Sun JRE (Linux Production Release) 1.2.2 _006
Sun JRE (Linux Production Release) 1.2.2 _005
Sun JRE (Linux Production Release) 1.2.2 _004
Sun JRE (Linux Production Release) 1.2.2 _003
Sun JRE (Linux Production Release) 1.2.2
Sun JRE (Linux Production Release) 1.3 .0_05
Sun JRE (Linux Production Release) 1.3 .0_04
Sun JRE (Linux Production Release) 1.3 .0_03
Sun JRE (Linux Production Release) 1.3 .0_02
Sun JRE (Linux Production Release) 1.3 .0_01
Sun JRE (Linux Production Release) 1.3 .0
Sun JRE (Linux Production Release) 1.3.1 _02
Sun JRE (Linux Production Release) 1.3.1 _01
Sun JRE (Linux Production Release) 1.3.1
Sun JRE (Reference Release) 1.2.2 _010
Sun JRE (Solaris Production Release) 1.2
Sun JRE (Solaris Production Release) 1.2.1
Sun JRE (Solaris Production Release) 1.2.2 _010
Sun JRE (Solaris Production Release) 1.2.2
Sun JRE (Solaris Production Release) 1.3 .0_05
Sun JRE (Solaris Production Release) 1.3 .0_02 and earlier
Sun JRE (Solaris Production Release) 1.3 .0_02
Sun JRE (Solaris Production Release) 1.3
Sun JRE (Solaris Production Release) 1.3.1 _05
Sun JRE (Solaris Production Release) 1.3.1 _04
Sun JRE (Solaris Production Release) 1.3.1 _03
Sun JRE (Solaris Production Release) 1.3.1 _02
Sun JRE (Solaris Production Release) 1.3.1 _01
Sun JRE (Solaris Reference Release) 1.2.2 _010
Sun JRE (Windows Production Release) 1.2
Sun JRE (Windows Production Release) 1.2.1
Sun JRE (Windows Production Release) 1.2.2 _010
Sun JRE (Windows Production Release) 1.2.2 _007 and earlier
Sun JRE (Windows Production Release) 1.2.2
Sun JRE (Windows Production Release) 1.3.1 _05
Sun JRE (Windows Production Release) 1.3.1 _04
Sun JRE (Windows Production Release) 1.3.1 _03
Sun JRE (Windows Production Release) 1.3.1 _02
Sun JRE (Windows Production Release) 1.3.1 _01a
Sun JRE (Windows Production Release) 1.3.1 _01
Sun SDK (Linux Production Release) 1.2.2 _010
Sun SDK (Linux Production Release) 1.2.2 _007 and earlier
Sun SDK (Linux Production Release) 1.2.2 _005 and previous
Sun SDK (Linux Production Release) 1.3 _05
Sun SDK (Linux Production Release) 1.3 _02
Sun SDK (Linux Production Release) 1.3 .0_02 and earlier
Sun SDK (Linux Production Release) 1.3.1 _02
Sun SDK (Linux Production Release) 1.3.1 _01
Sun SDK (Solaris Production Release) 1.3 _05
Sun SDK (Solaris Production Release) 1.3 _02
Sun SDK (Solaris Production Release) 1.3 .0_02 and earlier
Sun SDK (Solaris Production Release) 1.3
Sun SDK (Solaris Production Release) 1.3.1 _02
Sun SDK (Solaris Production Release) 1.3.1 _01
Sun SDK (Solaris Reference Release) 1.2.2 _010
Sun SDK (Windows Production Release) 1.2
Sun SDK (Windows Production Release) 1.2.1
Sun SDK (Windows Production Release) 1.2.2 _010
Sun SDK (Windows Production Release) 1.2.2 _007 and earlier
Sun SDK (Windows Production Release) 1.3 .0_05
Sun SDK (Windows Production Release) 1.3 .0_02 and earlier
Sun SDK (Windows Production Release) 1.3 .0_02
Sun SDK (Windows Production Release) 1.3.1 _02


Solution:
http://java.sun.com/j2se/


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »