jetlib.sec » Tags » sun-java-runtime-environment

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

25 items tagged "sun java runtime environment"

Related tags: web [+], start [+], security [+], ruben santamarta [+], mandriva [+], linux [+], environment [+], vulnerability [+], memory [+], joshua drake tags [+], corruption [+], code [+], abu dhabi [+], sun java runtime [+], java runtime environment [+], integer overflow vulnerability [+], java [+], sun [+], runtime [+]

• February 23, 2012
• 22:12

  Sun Java Web Start Plugin Command Line Argument Injection (2012)

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 22:12

  Sun Java Web Start Plugin Command Line Argument Injection (2012)

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 22:12

  Sun Java Web Start Plugin Command Line Argument Injection (2012)

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start ruben-santamarta sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• February 02, 2012
• 21:37

  [Slides] Exploiting Memory Corruption Vulnerabilities in the Java Runtime

   » ‎ SecDocs
  Authors: Joshua Drake
  Tags: memory heap overflow exploiting Java
  Event: Black Hat Abu Dhabi 2011
  Abstract: The Oracle (previously Sun) Java Runtime Environment (JRE) is widely viewed by security researchers as one of the weakest links in the proverbial chain. That said, the exploitation of memory corruption vulnerabilities within the JRE is not always straight-forward. This talk will focus on a collection of techniques to overcome potential issues that one may face while developing exploits against memory corruption vulnerabilities within the JRE. The talk concludes with a demonstration of the techniques as used on a selection of contrived and real-world vulnerabilities.

  Tags:  java corruption memory joshua-drake-tags abu-dhabi sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 21:37

  [Paper] Exploiting Memory Corruption Vulnerabilities in the Java Runtime

   » ‎ SecDocs
  Authors: Joshua Drake
  Tags: memory heap overflow exploiting Java
  Event: Black Hat Abu Dhabi 2011
  Abstract: The Oracle (previously Sun) Java Runtime Environment (JRE) is widely viewed by security researchers as one of the weakest links in the proverbial chain. That said, the exploitation of memory corruption vulnerabilities within the JRE is not always straight-forward. This talk will focus on a collection of techniques to overcome potential issues that one may face while developing exploits against memory corruption vulnerabilities within the JRE. The talk concludes with a demonstration of the techniques as used on a selection of contrived and real-world vulnerabilities.

  Tags:  java corruption memory joshua-drake-tags abu-dhabi sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• June 13, 2011
• 13:14

  Mandriva Linux Security Advisory 2011-108

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-108 - Apache Xerces2 Java, as used in Sun Java Runtime Environment in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

  Tags:  mandriva security linux sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 13:14

  Mandriva Linux Security Advisory 2011-108

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-108 - Apache Xerces2 Java, as used in Sun Java Runtime Environment in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

  Tags:  mandriva security linux sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 13:14

  Mandriva Linux Security Advisory 2011-108

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-108 - Apache Xerces2 Java, as used in Sun Java Runtime Environment in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

  Tags:  mandriva security linux sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• June 08, 2011
• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime-environment sun-java-runtime java-runtime-environment  

• February 11, 2011
• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• October 21, 2010
• 0:00

  Vuln: Sun Java Runtime Environment Unpack200 JAR Unpacking Utility Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment Unpack200 JAR Unpacking Utility Integer Overflow Vulnerability

  Tags:  java runtime sun integer-overflow-vulnerability sun-java-runtime sun-java-runtime-environment  

• August 04, 2010
• 14:22

  Sun Java Runtime Environment JPEGImageEncoderImpl Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime Environment.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun java-runtime-environment sun-java-runtime sun-java-runtime-environment  

• 14:02

  Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to violate security policies on vulnerable installations of Sun Java Runtime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• July 29, 2010
• 20:32

  Sun Java Runtime Environment JPEGImageDecoderImpl Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun sun-java-runtime java-runtime-environment sun-java-runtime-environment  

• 20:27

  Sun Java Runtime Environment Trusted Methods Chaining Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Runtime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• April 05, 2010
• 12:03

  ZDI-10-051.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-051 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious website. The specific flaw exists within the deserialization of RMIConnectionImpl objects. Due to a lack of privilege checks during deserialization it is possible to supply privileged code in the ClassLoader of a constructor being deserialized. This allows for a remote attacker to call system level Java functions without proper sandboxing. Exploitation of this can lead to remote system compromise under the context of the currently logged in user.

  Tags:  java code vulnerability sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  ZDI-10-051.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-051 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious website. The specific flaw exists within the deserialization of RMIConnectionImpl objects. Due to a lack of privilege checks during deserialization it is possible to supply privileged code in the ClassLoader of a constructor being deserialized. This allows for a remote attacker to call system level Java functions without proper sandboxing. Exploitation of this can lead to remote system compromise under the context of the currently logged in user.

  Tags:  java code vulnerability sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability

  Tags:  runtime sun environment sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability

  Tags:  runtime sun environment sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• 12:00

  Bugtraq: ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability

  Tags:  runtime sun environment sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• February 15, 2010
• 0:00

  Vuln: Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• February 10, 2010
• 0:00

  Vuln: Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment  

• January 20, 2010
• 0:00

  Vuln: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

  Tags:  java runtime sun sun-java-runtime sun-java-runtime-environment java-runtime-environment