• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment Font Processing Buffer Overflow Vulnerability

Solution:
Vendor advisory and fixes are available. Please see the references for more information.


Oracle JRockit R27.6.0

• Oracle BEA JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia32.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia64.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia32.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia64.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Sun Solaris (SPARC - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-solaris_sparcv9.tar.gz