• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment Multiple Unspecified Same Origin Policy Violation Vulnerabilities

Solution:
Sun has released an advisory along with fixes. Please see the references for more information.


Oracle JRockit R27.6.0

• Oracle BEA JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia32.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia64.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia32.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia64.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Sun Solaris (SPARC - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-solaris_sparcv9.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Linux (Intel Itanium - 64-bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_ia64.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_ia32.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Linux (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_x86_64.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Microsoft Windows (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_ia64.zip


• Oracle JRockit 5.0 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_ia32.zip


• Oracle JRockit 5.0 R27.6.0 JDK Microsoft Windows (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_x86_64.zip


• Oracle JRockit 5.0 R27.6.0 JDK Solaris (SPARC - 64-bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-solaris_sparcv9.tar.gz


• Oracle JRockit 6 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-linux_ia32.tar.gz


• Oracle JRockit 6 R27.6.0 JDK Linux (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-linux_x86_64.tar.gz


• Oracle JRockit 6 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-windows_ia32.zip


• Oracle JRockit 6 R27.6.0 JDK Microsoft Windows (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-windows_x86_64.zip


• Oracle JRockit 6 R27.6.0 JDK Solaris (SPARC - 64-bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-solaris_sparcv9.tar.gz