Oracle Java SE and Java for Business ICC Profile Multiple Remote Code Execution Vulnerabilities

Oracle Java SE and Java for Business are prone to multiple remote code-execution vulnerabilities when processing certain color profiles.

An attacker can exploit this issue to execute arbitrary code in the context of the victim running the affected application.

This vulnerability affects the following supported versions:
6 Update 25, 5.0 Update 29, 1.4.2_31


 

Privacy Statement
Copyright 2010, SecurityFocus