Nortel response to Sun Java JDK / JRE Multiple Vulnerabilities
| Description: |
http://sunsolve.sun.com/search/document.do?assetkey=1-66-233321-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-233322-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-233323-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-233324-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-233325-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-233326-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-233327-1 Sun Microsystems has recently issued fixes for multiple vulnerabilities in Sun Java. Some Nortel products contain this software as a component and thus are potentially affected by the vulnerabilities addressed. This bulletin provides a multi-product consolidated response for the Nortel products which are potentially affected. This bulletin addresses the following potential vulnerabilites: 1) Two unspecified errors in the Java Runtime Environment Virtual Machine can be exploited by a malicious, untrusted applet to read and write local files and execute local applications. 2) An unspecified error in the Java Runtime Environment (JRE) when processing XSLT transformations can be exploited by untrusted applets or applications to e.g. read certain URL resources or potentially execute arbitrary code. 3) A boundary error exists in the "useEncodingDecl()" function when parsing the xml header character encoding attribute. This can be exploited to cause a stack-based buffer overflow and execute arbitrary code via a specially crafted JNLP file containing an overly long charset name in the xml header. 4) A boundary error exists in the "useEncodingDecl()" function when processing xml-based JNLP files for UTF8 characters. This can be exploited to cause a stack-based buffer overflow and execute arbitrary code via a specially crafted JNLP file containing overly long key name in the xml header. 5) A boundary error exist in Java Web Start, which can be exploited e.g. by an untrusted Java Web Start application to read and w |
| Type: |
Security Advisories |
| Number: |
2008008808, Rev 1 |
| Status: |
Retired |
| Date: |
2008-05-07 |
