HTTP: Sun Java JNLP java-vm-args Attribute Overflow

This signature detects attempts to exploit a known vulnerability in the Java JRE implementation. Attackers can create a malicious JNLP file that, when loaded by a user, can compromise the user's computer.

Extended Description

Sun Java Web Start is prone to multiple vulnerabilities, including buffer-overflow, privilege-escalation, and information-disclosure issues. Successful exploits may allow attackers to execute arbitrary code, obtain information, or read, write, and execute arbitrary local files in the context of the user running a malicious Web Start application. This may result in a compromise of the underlying system. This issue affects the following versions: JDK and JRE 6 Update 6 and earlier JDK and JRE 5.0 Update 15 and earlier SDK and JRE 1.4.2_17 and earlier

Affected Products

Nortel_networks self-service_mps_1000,Red_hat enterprise_linux_as_extras

References

BugTraq: 30148

CVE: CVE-2008-3111

URL: http://www.zerodayinitiative.com/advisories/ZDI-08-043 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238905-1 http://www.zerodayinitiative.com/advisories/zdi-08-043

Short Name

HTTP:STC:JAVA:JAVA-VM-ARGS-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Sun Java JNLP java-vm-args Attribute Overflow

Extended Description

Affected Products

References

Found a potential security threat?