• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment Image Parsing Heap Buffer Overflow Vulnerability

Solution:
Sun has released security updates to address this issue. Please see the references for details.


Sun JDK 5.0 Update 8

• Sun 118666-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-16-1


• Sun 118667-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-16-1


• Sun 118668-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-16-1


• Sun 118669-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-16-1


• Sun JDK and JRE 5.0 Update 15
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Windows Production Release) 1.4.2_16

• Sun SDK and JRE 1.4.2_17
  http://java.sun.com/j2se/1.4.2/download.html

Sun JDK 5.0 Update 7

• Sun 118666-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118666-16-1


• Sun 118667-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118667-16-1


• Sun 118668-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118668-16-1


• Sun 118669-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118669-16-1


• Sun JDK and JRE 5.0 Update 15
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE 6.0 Update 2

• Sun JDK and JRE 6 Update 5
  http://java.sun.com/javase/downloads/index.jsp

Sun JDK (Linux Production Release) 1.6 _04

• Sun 125136-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125136-07-1


• Sun 125137-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125137-07-1


• Sun 125138-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125138-07-1


• Sun 125139-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125139-07-1


• Sun JDK and JRE 6 Update 5
  http://java.sun.com/javase/downloads/index.jsp