Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: Windows --> Category: infos

Sun Java Runtime Environment GIF Image Buffer Overflow Vulnerability (102760) Vulnerability Scan


Vulnerability Scan Summary
Checks version of Sun JRE

Detailed Explanation for this Vulnerability Test

Synopsis :

The remote Windows host has a version of Sun's Java Runtime
Environment that is affected by a buffer overflow vulnerability.

Description :

According to its version number, the Sun JRE installed on the remote
host has a buffer overflow issue that can be triggered when parsing a
GIF image with the image width in an image block set to 0. If an
attacker can trick a user on the affected system into processing a
specially-crafted image file, say by visiting a malicious web site, he
may be able to leverage this flaw to execute arbitrary code on the
affected system subject to the user's rights.

See also :

http://www.zerodayinitiative.com/advisories/ZDI-07-005.html
http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0329.html
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1

Solution :

Update to Sun Java 2 JDK and JRE 5.0 Update 10 / SDK and JRE 1.4.2_13
/ SDK and JRE 1.3.1_19 or later and remove if necessary any affected
versions.

Threat Level:

High / CVSS Base Score : 8.0
(AV:R/AC:H/Au:NR/C:C/I:C/A:C/B:N)

Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.