|
|
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
|
Sun patches critical JRE security flaws By Dawn Kawamoto, CNET News.com January 19, 2007 URL: http://www.zdnet.com.au/news/security/soa/Sun-patches-critical-JRE-security-flaws/0,130061744,339273138,00.htm
Sun Microsystems has issued a critical security patch to address vulnerabilities in Sun's Java Runtime Environment when it processes graphics interchange format, or GIF, images. The security flaws could allow an attacker to gain control of a user's system via an untrusted Java applet, which in turn could allow attackers to grant themselves permission to read and write local files or execute applications on the user's computer, according to an advisory issued by Secunia on Wednesday. Exploitation of these vulnerabilities, however, requires a user to visit a malicious Web site, noted Zero Day Initiative, which reported the vulnerability with the aid an anonymous researcher. 
The security flaws affect Sun's Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 update 9 and earlier, Software Development Kit (SDK) and JRE 1.4.2_12 and earlier; as well as SDK and JRE 1.3.1_18 and earlier for the Windows, Linux and Solaris platforms, according to an advisory issued by Sun on Tuesday. Sun issued several patches to address the problem, which is somewhat similar to previous security flaws found in JRE.
Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved. |
