< Back to JetLib.com

java-runtime-environment

« Expand/Collapse

412 items tagged "java runtime environment"

Skip to page: 1 2

May 17, 2012
14:16
HP Security Bulletin HPSBUX02777 SSRT100854
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBUX02777 SSRT100854 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities may allow remote Denial of Service (DoS), unauthorized modification and disclosure of information. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

14:16
HP Security Bulletin HPSBUX02777 SSRT100854
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBUX02777 SSRT100854 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities may allow remote Denial of Service (DoS), unauthorized modification and disclosure of information. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

14:16
HP Security Bulletin HPSBUX02777 SSRT100854
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBUX02777 SSRT100854 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities may allow remote Denial of Service (DoS), unauthorized modification and disclosure of information. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

April 05, 2012
19:42
HP Security Bulletin HPSBUX02760 SSRT100805
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBUX02760 SSRT100805 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

19:42
HP Security Bulletin HPSBUX02760 SSRT100805
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBUX02760 SSRT100805 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

19:42
HP Security Bulletin HPSBUX02760 SSRT100805
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBUX02760 SSRT100805 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

19:06
HP Security Bulletin HPSBUX02757 SSRT100779 2
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBUX02757 SSRT100779 2 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 2 of this advisory.
Tags: java-developer-kit java-runtime-environment security-vulnerabilities

19:06
HP Security Bulletin HPSBUX02757 SSRT100779 2
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBUX02757 SSRT100779 2 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 2 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

19:06
HP Security Bulletin HPSBUX02757 SSRT100779 2
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBUX02757 SSRT100779 2 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 2 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

February 23, 2012
22:12
Sun Java Web Start Plugin Command Line Argument Injection (2012)
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.
Tags: java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment

22:12
Sun Java Web Start Plugin Command Line Argument Injection (2012)
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.
Tags: java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment

22:12
Sun Java Web Start Plugin Command Line Argument Injection (2012)
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.
Tags: java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment

February 21, 2012
18:10
Red Hat Security Advisory 2012-0322-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0322-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine

18:10
Red Hat Security Advisory 2012-0322-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0322-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine

18:10
Red Hat Security Advisory 2012-0322-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0322-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine

February 15, 2012
14:46
Red Hat Security Advisory 2012-0135-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine

14:46
Red Hat Security Advisory 2012-0135-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine

14:46
Red Hat Security Advisory 2012-0135-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine

February 02, 2012
21:37
[Slides] Exploiting Memory Corruption Vulnerabilities in the Java Runtime
» ‎ SecDocs

Authors: Joshua Drake
Tags: memory heap overflow exploiting Java
Event: Black Hat Abu Dhabi 2011
Abstract: The Oracle (previously Sun) Java Runtime Environment (JRE) is widely viewed by security researchers as one of the weakest links in the proverbial chain. That said, the exploitation of memory corruption vulnerabilities within the JRE is not always straight-forward. This talk will focus on a collection of techniques to overcome potential issues that one may face while developing exploits against memory corruption vulnerabilities within the JRE. The talk concludes with a demonstration of the techniques as used on a selection of contrived and real-world vulnerabilities.
Tags: java corruption memory joshua-drake-tags abu-dhabi sun-java-runtime sun-java-runtime-environment java-runtime-environment
21:37
[Paper] Exploiting Memory Corruption Vulnerabilities in the Java Runtime
» ‎ SecDocs

Authors: Joshua Drake
Tags: memory heap overflow exploiting Java
Event: Black Hat Abu Dhabi 2011
Abstract: The Oracle (previously Sun) Java Runtime Environment (JRE) is widely viewed by security researchers as one of the weakest links in the proverbial chain. That said, the exploitation of memory corruption vulnerabilities within the JRE is not always straight-forward. This talk will focus on a collection of techniques to overcome potential issues that one may face while developing exploits against memory corruption vulnerabilities within the JRE. The talk concludes with a demonstration of the techniques as used on a selection of contrived and real-world vulnerabilities.
Tags: java corruption memory joshua-drake-tags abu-dhabi sun-java-runtime sun-java-runtime-environment java-runtime-environment

January 27, 2012
16:45
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.
Tags: execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention

16:45
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.
Tags: execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention

16:45
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.
Tags: execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention

January 25, 2012
8:35
HP Security Bulletin HPSBUX02730 SSRT100710
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBUX02730 SSRT100710 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

8:35
HP Security Bulletin HPSBUX02730 SSRT100710
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBUX02730 SSRT100710 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

8:35
HP Security Bulletin HPSBUX02730 SSRT100710
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBUX02730 SSRT100710 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

December 20, 2011
8:44
HP Security Bulletin HPSBUX02697 SSRT100591
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBUX02697 SSRT100591 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

8:44
HP Security Bulletin HPSBUX02697 SSRT100591
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBUX02697 SSRT100591 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

8:44
HP Security Bulletin HPSBUX02697 SSRT100591
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBUX02697 SSRT100591 - Potential security vulnerabilities have been identified in Java Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities. Revision 1 of this advisory.
Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Skip to page: 1 2

jetlib.sec » Tags » java-runtime-environment

Feeds

412 items tagged "java runtime environment"

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: java oracle business java-runtime-environment oracle-java cve

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java code-execution

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java code-execution

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime environment java-runtime-environment oracle-java code-execution

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: java-developer-kit java-runtime-environment security-vulnerabilities

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: hpsbux bulletin security java-developer-kit java-runtime-environment security-vulnerabilities

Tags: java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java service-vulnerability

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime environment java-runtime-environment oracle-java code-execution

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime remote java-runtime-environment oracle-java cve

Tags: oracle runtime environment java-runtime-environment integer-overflow oracle-java

Tags: oracle runtime environment java-runtime-environment oracle-java code-execution