|
|
Family: Windows --> Category: infos
Sun Java Runtime Environment GIF Image Buffer Overflow Vulnerability (102760) Vulnerability Scan
Vulnerability Scan Summary
Checks version of Sun JRE
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote Windows host has a version of Sun's Java Runtime
Environment that is affected by a buffer overflow vulnerability.
Description :
According to its version number, the Sun JRE installed on the remote
host has a buffer overflow issue that can be triggered when parsing a
GIF image with the image width in an image block set to 0. If an
attacker can trick a user on the affected system into processing a
specially-crafted image file, say by visiting a malicious web site, he
may be able to leverage this flaw to execute arbitrary code on the
affected system subject to the user's rights.
See also :
http://www.zerodayinitiative.com/advisories/ZDI-07-005.html
http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0329.html
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1
Solution :
Update to Sun Java 2 JDK and JRE 5.0 Update 10 / SDK and JRE 1.4.2_13
/ SDK and JRE 1.3.1_19 or later and remove if necessary any affected
versions.
Threat Level:
High / CVSS Base Score : 8.0
(AV:R/AC:H/Au:NR/C:C/I:C/A:C/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
