Nortel Response to Sun Java/JRE Multiple Vulnerabilities - SA27009
| Description: |
Before taking any action please ensure that you are viewing the latest official version of this security advisory by referencing http://www.nortel.com/securityadvisories Multiple vulnerabilities have been reported in Sun Java JRE (Java Runtime Environment), which can be exploited by malicious people to bypass certain security restrictions, manipulate data, disclose sensitive/system information, or potentially compromise a vulnerable system. 1) Multiple unspecified errors in the Java Runtime Environment can be exploited by e.g. a malicious applet or by using Java APIs to establish network connections to certain services on machines other than the originating host. 2) Multiple unspecified errors in Java Web Start can be exploited by a malicious applet to read/write local files or determine the location of the Java Web Start cache. 3) An unspecified error in the Java Runtime Environment can be exploited to move or copy arbitrary files on the system by e.g. tricking a user into dragging and dropping a file from an applet to a desktop application that has the proper permissions. Some Nortel products contain the affected software as a component and thus are potentially affected by these vulnerabilities. This multi-product consolidated response bulletin provides Nortel's recommendations for these products. |
| Type: |
Security Advisories |
| Number: |
2007008451, Rev 1 |
| Status: |
Retired |
| Date: |
2008-02-22 |
