.:[ packet storm ]:.
                           
honesty is the best policy
honesty is the best policy

 ///  File Name:12.02.08-1.txt
Description:
iDefense Security Advisory 12.02.08 - Remote exploitation of a heap overflow vulnerability in Sun Microsystems Inc.'s Java JRE could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability exists within the font parsing code in the JRE. Various types of fonts are supported, one of which is the TrueType format font. The vulnerability occurs when processing TrueType font files. During parsing, improper bounds checking is performed, which can lead to a heap based buffer overflow. iDefense has confirmed the existence of this vulnerability in Sun Microsystem Inc.'s Java JRE version 1.6.0_07 for Windows. Previous versions and versions for other platforms may also be affected.
Author:Sean Larsson
Homepage:http://www.idefense.com/
File Size:3621
Last Modified:Dec 4 17:12:17 2008
MD5 Checksum:12bb9b8cb99e58ca9b09ec0b0bb4c91a

 .:. Back