Sun Microsystems has patched a number of flaws in its Java products that affect users running Windows, Linux and Solaris.
Secunia rated the flaws as 'highly critical' in a security advisory because they could allow a remote attacker to bypass security, gain system access, expose system and sensitive information and manipulate data.
Vulnerabilities were reported in the Java Developer Kit, Java Runtime Environment 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, Software Developer Kit and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier.
Problems included multiple unspecified errors that could allow hackers to use malicious applets or APIs to establish network connections on machines other than the originating host.
Other errors in Java Web Start could also be exploited to read or write local files or find the location of the Java Web Start cache.
An unspecified JRE error could also be used to move or copy arbitrary files on the system.
Sun credited Billy Rios, Dan Boneh, Collin Jackson, Adam Barth, Andrew Bortz, Weidong Shao, David Byrne and Peter Csepely with finding the vulnerabilities.
More details on the patches are available on the official Sun Security Blog.
Four 'critical' patches in monthly update 05 Oct 2007
Vista and XP spared from most dangerous vulnerabilities 12 Sep 2007
Software exposes users to remote code execution vulnerability 07 Sep 2007
Hackers could execute code and gain control of a BlackBerry Enterprise Server 27 May 2009
Experts sound alarms over early disclosure 23 Jul 2008
Web hosts encouraged to lock down server component 20 May 2009
Survey of public sector IT managers reveals deep concern over ability to deliver on carbon-neutral targets 03 Jul 2009
Fresh funding will provide new wave energy research equipment and support research 03 Jul 2009
EPA hints it could soon raise efficiency bar for routers, modems and storage systems 03 Jul 2009
More news
From record-breaking solar panels to the International Renewable Energy Agency's new home, we round up the top stories from the past week 03 Jul 2009
Well, I hope they got a no win, no fee deal. I don't like being cynical (it's more of a congenital thing)... 03 Jul 2009
Recycling waste heat is nothing new, so why has the computer industry not kept up? 01 Jul 2009 More in-depth
Post your comment
Send an email to the Business Green editor at feedback@businessgreen.com
