Critical Flaws Found in Java Development Kit

May 18, 2007

The two flaws could be exploited remotely by hackers, with one resulting in the possible execution of code.

Two vulnerabilities open to remote exploitation by hackers have been found in Java Development Kit, one of which could be used to take over a compromised system.

JDK (Java Development Kit) is a software development tool made by Sun Microsystems specifically for Java users. The vulnerabilities were rated "critical" by FrSIRT (French Security Incident Response Team), a security research organization based in France.

One flaw is caused by an integer overflow error in the image parser when processing ICC profiles embedded within JPEG images, according to FrSIRT researchers.

Security experts at Secunia outlined the dangers of the flaw in a separate advisory. "This can be exploited to crash the JVM and potentially allow the execution of arbitrary code by e.g. tricking an application using the JDK to process a malicious image file," Secunia security experts stated.

The second vulnerability is caused by an error in the BMP image parser when processing malformed files on Unix/Linux systems, which could be exploited by attackers to cause a denial of service. Both flaws affect Sun JDK version 1.x.

Users can find an answer to both vulnerabilities by upgrading to JDK versions 1.5.0_11-b03 or 1.6.0_01-b06.

Copyright 2007 by Ziff Davis Media, Distributed by United Press International

Explore further: Mathematician designs social sustainability software

Related Stories

California beaches reopen after goo cleanup

4 hours ago

Seven miles of Southern California beach shut down for three days by an invasion of oily goo were reopened Friday evening after health officials declared the sand and water safe following a cleanup.

Self-folding robot walks, swims, climbs, dissolves

4 hours ago

A demo sparking interest at the ICRA 2015 conference in Seattle was all about an origami robot that was worked on by researchers. More specifically, the team members are from the computer science and artificial ...

Recommended for you

Mathematician designs social sustainability software

May 29, 2015

Edgar Antonio Valdés Porras has designed a software and service-oriented theoretical methodology supporting sustainability for cities, which if implemented, would increase economic impact points and infrastructure ...

Google unveils Android's latest technological tricks

May 28, 2015

Google's next version of its Android operating system will boast new ways to fetch information, pay merchants and protect privacy on mobile devices as the Internet company duels with Apple in the quest to ...

User comments : 0

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.