• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment Font Processing Buffer Overflow Vulnerability

Solution:
Vendor advisory and fixes are available. Please see the references for more information.


Oracle JRockit R27.6.0

• Oracle BEA JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia32.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia64.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia32.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia64.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Sun Solaris (SPARC - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-solaris_sparcv9.tar.gz