Sun JRE Font Parsing Vulnerability
Sun JRE Font Parsing Vulnerability
HIGHLY CRITICALWhy am I not surprised that there's another issue with applets and Sun's java runtime ?
Description:
A vulnerability has been reported in Sun JRE, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to an unspecified error in the parsing of fonts contained in Java applets. This can be exploited by malicious, untrusted applets to read and write local files, or to execute local applications.
The vulnerability is reported in the following products:
* JDK and JRE 5.0 Update 9 and earlier
* SDK and JRE 1.4.2_14 and earlierSolution:
Update to the latest versions or apply patches:JDK and JRE 5.0 Update 10 or later
http://java.sun.com/j2se/1.5.0/download.jspSDK and JRE 1.4.2_15 or later
http://java.sun.com/j2se/1.4.2/download.html
And remember, bunkies, the java autoupdater does not remove older, vulnerable versions !
One must uninstall it/them from Add/Remove Programs in the Control Panel on Windows OS'.