ZDI-11-190: Oracle Java ICC Profile ‘crdi’ Tag Parsing Remote Code Execution Vulnerability

Publié par UnderNews Actu

Posted by ZDI Disclosures on Jun 08

ZDI-11-190: Oracle Java ICC Profile 'crdi' Tag Parsing Remote Code Execution Vulnerability

http://www.zerodayinitiative.com/advisories/ZDI-11-190

June 8, 2011

– CVE ID:
CVE-2011-0862

– CVSS:
9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)

– Affected Vendors:
Oracle

– Affected Products:
Oracle Java Runtime

– TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine…

Source: ZDI-11-190: Oracle Java ICC Profile ‘crdi’ Tag Parsing Remote Code Execution Vulnerability

Classé dans : SecLists