CVE-2007-0243 Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a G...
MediumCVSS 6.8
EPSS 11.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | <= 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jre | <= 1.3.1 | No fix listed |
| sun jre | = 1.3.1-update16 | No fix listed |
| sun jre | = 1.4.2_1 | No fix listed |
| sun jre | = 1.4.2_2 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_4 | No fix listed |
| sun jre | = 1.4.2_5 | No fix listed |
| sun jre | = 1.4.2_6 | No fix listed |
| sun jre | = 1.4.2_7 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun sdk | = 1.3.1_01 | No fix listed |
| sun sdk | = 1.3.1_01a | No fix listed |
| sun sdk | = 1.3.1_16 | No fix listed |
| sun sdk | = 1.3.1_18 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_03 | No fix listed |
| sun sdk | = 1.4.2_08 | No fix listed |
| sun sdk | = 1.4.2_09 | No fix listed |
| sun sdk | = 1.4.2_10 | No fix listed |
| sun sdk | = 1.4.2_12 | No fix listed |
References
- BEA07-172.00 vendor-advisory
- docs.info.apple.com
- HPSBUX02196 vendor-advisory
- APPLE-SA-2007-12-14 vendor-advisory
- 32834 vdb-entry
- 23757 third-party-advisory
- 24189 third-party-advisory
- 24202 third-party-advisory
- 24468 third-party-advisory
- 24993 third-party-advisory
- 25283 third-party-advisory
- 26049 third-party-advisory
- 26119 third-party-advisory
- 26645 third-party-advisory
- 27203 third-party-advisory
- 28115 third-party-advisory
- GLSA-200702-08 vendor-advisory
- 2158 third-party-advisory
- 1017520 vdb-entry
- 102760 patch vendor-advisory
- support.novell.com
- support.novell.com
- GLSA-200702-07 vendor-advisory
- VU#388289 third-party-advisory us-government-resource
- SUSE-SA:2007:045 vendor-advisory
- RHSA-2007:0166 vendor-advisory
- RHSA-2007:0167 vendor-advisory
- RHSA-2007:0956 vendor-advisory
- RHSA-2008:0261 vendor-advisory
- 20070117 ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability mailing-list
- 20070121 Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit mailing-list
- 22085 vdb-entry
- TA07-022A third-party-advisory us-government-resource
- ADV-2007-0211 vdb-entry
- ADV-2007-0936 vdb-entry
- ADV-2007-1814 vdb-entry
- ADV-2007-4224 vdb-entry
- www.zerodayinitiative.com patch vendor-advisory
- jre-gif-bo(31537) vdb-entry
- oval:org.mitre.oval:def:11073 signature vdb-entry