PT-2007-4102 · Sun · Java Development Kit+1

Publicado

2007-05-22

·

Atualizado

2019-08-01

·

CVE-2007-2788

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Sun Java Development Kit (JDK) versions 1.3.1 through 1.5.0 10 Sun Java Development Kit (JDK) versions 1.6.x prior to 1.6.0 01-b06 Sun Java Runtime Environment (JRE) versions 1.3.1 through 1.5.0 10 Sun Java Runtime Environment (JRE) versions 1.6.x prior to 1.6.0 01-b06
Description The issue is caused by an integer overflow in the embedded ICC profile image parser, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted JPEG or BMP file that triggers a buffer overflow.
Recommendations For Sun Java Development Kit (JDK) versions 1.3.1 through 1.5.0 10, update to version 1.5.0 11-b03 or later. For Sun Java Development Kit (JDK) versions 1.6.x prior to 1.6.0 01-b06, update to version 1.6.0 01-b06 or later. For Sun Java Runtime Environment (JRE) versions 1.3.1 through 1.5.0 10, update to version 1.5.0 11-b03 or later. For Sun Java Runtime Environment (JRE) versions 1.6.x prior to 1.6.0 01-b06, update to version 1.6.0 01-b06 or later.

Exploit

Correção

RCE

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2007-2788
RHSA-2007:0817
RHSA-2007:0829
RHSA-2007:0956
RHSA-2007:1086
RHSA-2008:0100
RHSA-2008:0261
RHSA-2008:0524

Produtos afetados

Java Development Kit
Sun Java Runtime Environment