Solution Type Sun Alert Solution 200456 : Security Vulnerabilities in the Java Runtime Environment may Allow an Untrusted Applet to Access Data in Other Applets
Previously Published As 102732 Product Java 2 Platform, Standard Edition Bug ID 6332750, 6378197 Date of Resolved Release 19-DEC-2006 SA Document Body 6PK5M7S Internal ID use only. Impact Two vulnerabilities in the Java Runtime Environment may independently allow an untrusted applet to access data in other applets. Sun acknowledges, with thanks, Tom Hawtin, for bringing these issues to our attention. Contributing Factors The first issue can occur in the following releases (for Windows, Solaris, and Linux):
The second issue can occur in the following releases (for Windows, Solaris, and Linux):
To determine the default version of the JRE on a system for Solaris and Linux, the following command can be run: % java -version Note: The above command only determines the default version. Other versions may also be installed on the system. To determine the default version of the JRE on a system for Windows:
Note: The above command only determines the default version. Other versions may also be installed on the system. Symptoms There are no reliable symptoms that would indicate the described issues have been exploited. Workaround There is no workaround. Resolution The first issue is addressed in the following releases (for Windows, Solaris, and Linux):
The second issue is addressed in the following releases (for Windows, Solaris, and Linux):
JRE 5.0 Update 6 for Solaris was also delivered in the following patches:
JRE 5.0 Update 7 for Solaris was also delivered in the following patches:
The latest releases for J2SE are available for download at: J2SE 5.0: J2SE 5.0 Update 9 for Solaris is also available in the following patches:
J2SE 1.4.2 is available for download at: J2SE 1.3.1 is available for download at: Note: When installing a new version of the product from a source other than a Solaris patch, it is recommended that the old affected versions be removed from your system. For more information, please see the installation notes on the respective java.sun.com download pages. Attachments This solution has no attachment
|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||