jetlib.sec » Tags » sun-java-runtime

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

34 items tagged "sun java runtime"

Related tags: zero day [+], zdi [+], vulnerability [+], zero [+], web [+], start [+], security [+], ruben santamarta [+], mandriva [+], linux [+], heap memory [+], environment [+], dom [+], day [+], code [+], browser [+], user [+], memory [+], joshua drake tags [+], corruption [+], code execution [+], arbitrary code [+], abu dhabi [+], sun java runtime environment [+], java runtime environment [+], java [+], trust issue [+], target method [+], safer use [+], method [+], malicious applets [+], malicious applet [+], integer overflow vulnerability [+], cmm [+], applet [+], sun [+], runtime [+]

• February 23, 2012
• 22:12

  Sun Java Web Start Plugin Command Line Argument Injection (2012)

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 22:12

  Sun Java Web Start Plugin Command Line Argument Injection (2012)

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 22:12

  Sun Java Web Start Plugin Command Line Argument Injection (2012)

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• February 02, 2012
• 21:37

  [Slides] Exploiting Memory Corruption Vulnerabilities in the Java Runtime

   » ‎ SecDocs
  Authors: Joshua Drake
  Tags: memory heap overflow exploiting Java
  Event: Black Hat Abu Dhabi 2011
  Abstract: The Oracle (previously Sun) Java Runtime Environment (JRE) is widely viewed by security researchers as one of the weakest links in the proverbial chain. That said, the exploitation of memory corruption vulnerabilities within the JRE is not always straight-forward. This talk will focus on a collection of techniques to overcome potential issues that one may face while developing exploits against memory corruption vulnerabilities within the JRE. The talk concludes with a demonstration of the techniques as used on a selection of contrived and real-world vulnerabilities.

  Tags:  java corruption memory joshua-drake-tags abu-dhabi sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 21:37

  [Paper] Exploiting Memory Corruption Vulnerabilities in the Java Runtime

   » ‎ SecDocs
  Authors: Joshua Drake
  Tags: memory heap overflow exploiting Java
  Event: Black Hat Abu Dhabi 2011
  Abstract: The Oracle (previously Sun) Java Runtime Environment (JRE) is widely viewed by security researchers as one of the weakest links in the proverbial chain. That said, the exploitation of memory corruption vulnerabilities within the JRE is not always straight-forward. This talk will focus on a collection of techniques to overcome potential issues that one may face while developing exploits against memory corruption vulnerabilities within the JRE. The talk concludes with a demonstration of the techniques as used on a selection of contrived and real-world vulnerabilities.

  Tags:  java corruption memory joshua-drake-tags abu-dhabi sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• June 13, 2011
• 13:14

  Mandriva Linux Security Advisory 2011-108

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-108 - Apache Xerces2 Java, as used in Sun Java Runtime Environment in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

  Tags:  mandriva security linux sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 13:14

  Mandriva Linux Security Advisory 2011-108

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-108 - Apache Xerces2 Java, as used in Sun Java Runtime Environment in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

  Tags:  mandriva security linux sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 13:14

  Mandriva Linux Security Advisory 2011-108

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-108 - Apache Xerces2 Java, as used in Sun Java Runtime Environment in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

  Tags:  mandriva security linux sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• June 08, 2011
• 16:42

  Zero Day Initiative Advisory 11-182

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-182 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Sun Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JP2IEXP.dll browser plugin. The module creates a window hook when an applet is instantiated within the context of a browser. If the underlying DOM element is cloned and the parent object removed, a dangling reference can exist. When the module attempts to walk the relationship list to call the window hook, the process can be made to jump into uninitialized heap memory. This can be exploited by an attacker to execute code under the context of the user running the browser.

  Tags:  day zero browser dom sun-java-runtime heap-memory zero-day  

• 16:42

  Zero Day Initiative Advisory 11-182

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-182 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Sun Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JP2IEXP.dll browser plugin. The module creates a window hook when an applet is instantiated within the context of a browser. If the underlying DOM element is cloned and the parent object removed, a dangling reference can exist. When the module attempts to walk the relationship list to call the window hook, the process can be made to jump into uninitialized heap memory. This can be exploited by an attacker to execute code under the context of the user running the browser.

  Tags:  day zero browser dom sun-java-runtime heap-memory zero-day  

• 16:42

  Zero Day Initiative Advisory 11-182

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-182 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Sun Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JP2IEXP.dll browser plugin. The module creates a window hook when an applet is instantiated within the context of a browser. If the underlying DOM element is cloned and the parent object removed, a dangling reference can exist. When the module attempts to walk the relationship list to call the window hook, the process can be made to jump into uninitialized heap memory. This can be exploited by an attacker to execute code under the context of the user running the browser.

  Tags:  day zero browser dom sun-java-runtime heap-memory zero-day  

• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• February 11, 2011
• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• October 21, 2010
• 0:00

  Vuln: Sun Java Runtime Environment Unpack200 JAR Unpacking Utility Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment Unpack200 JAR Unpacking Utility Integer Overflow Vulnerability

  Tags:  java runtime sun integer-overflow-vulnerability sun-java-runtime sun-java-runtime-environment  

• October 12, 2010
• 21:01

  ZDI-10-202.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-202 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime. User interaction is required in that a target must visit a malicious page. The specific flaw exists within the com.sun.jnlp.BasicServiceImpl class. By abusing how Web Start retrieves security policies, an attacker can forge their own and force the removal of sandbox restrictions. Successful exploitation leads to code execution under the context of the user running the browser.

  Tags:  zdi sun user sun-java-runtime zero-day arbitrary-code  

• 21:01

  ZDI-10-202.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-202 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime. User interaction is required in that a target must visit a malicious page. The specific flaw exists within the com.sun.jnlp.BasicServiceImpl class. By abusing how Web Start retrieves security policies, an attacker can forge their own and force the removal of sandbox restrictions. Successful exploitation leads to code execution under the context of the user running the browser.

  Tags:  zdi sun user sun-java-runtime zero-day arbitrary-code  

• August 04, 2010
• 14:22

  Sun Java Runtime Environment JPEGImageEncoderImpl Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime Environment.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun java-runtime-environment sun-java-runtime sun-java-runtime-environment  

• 14:02

  Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to violate security policies on vulnerable installations of Sun Java Runtime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• July 29, 2010
• 20:32

  Sun Java Runtime Environment JPEGImageDecoderImpl Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun sun-java-runtime java-runtime-environment sun-java-runtime-environment  

• 20:27

  Sun Java Runtime Environment Trusted Methods Chaining Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Runtime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 20:27

  Sun Java Runtime CMM readMabCurveData Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun sun-java-runtime code-execution safer-use  

• April 05, 2010
• 19:52

  ZDI-10-055.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-055 - This vulnerability allows remote attackers to violate security policies on vulnerable installations of Sun Java Runtime. User interaction is required to exploit this vulnerability in that the target must run a malicious applet. The specific flaw allows malicious applets to connect to network addresses other than the originating applet and client IPs. A handcrafted applet can override compile time checks to prevent compilation of a mutable InetAddress subclass. This results in the ability to circumvent the Applet SecurityManager restrictions.

  Tags:  zdi vulnerability applet sun-java-runtime malicious-applet malicious-applets  

• 19:52

  ZDI-10-056.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-056 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Runtime. Authentication is not required to exploit this vulnerability. The specific flaw exists within the code responsible for ensuring proper privileged execution of methods. If an untrusted method in an applet attempts to call a method that requires privileges, Java will walk the call stack and for each entry verify that the method called is defined within a class that has that privilege. However, this does not take into account an untrusted object that has extended the trusted class without overwriting the target method. Additionally, this can be bypassed by abusing a similar trust issue with interfaces. An attacker can leverage these insecurities to execute vulnerable code under the context of the user invoking the JRE.

  Tags:  code vulnerability method sun-java-runtime target-method trust-issue  

• 13:00

  Bugtraq: ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability

  Tags:  cmm runtime sun sun-java-runtime code-execution zdi  

• 12:03

  ZDI-10-051.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-051 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious website. The specific flaw exists within the deserialization of RMIConnectionImpl objects. Due to a lack of privilege checks during deserialization it is possible to supply privileged code in the ClassLoader of a constructor being deserialized. This allows for a remote attacker to call system level Java functions without proper sandboxing. Exploitation of this can lead to remote system compromise under the context of the currently logged in user.

  Tags:  java code vulnerability sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  ZDI-10-051.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-051 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious website. The specific flaw exists within the deserialization of RMIConnectionImpl objects. Due to a lack of privilege checks during deserialization it is possible to supply privileged code in the ClassLoader of a constructor being deserialized. This allows for a remote attacker to call system level Java functions without proper sandboxing. Exploitation of this can lead to remote system compromise under the context of the currently logged in user.

  Tags:  java code vulnerability sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability

  Tags:  runtime sun environment sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability

  Tags:  runtime sun environment sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability

  Tags:  runtime sun environment sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• February 15, 2010
• 0:00

  Vuln: Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• February 10, 2010
• 0:00

  Vuln: Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• January 20, 2010
• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment