Sun Microsystems has patched a number of flaws in its Java products that affect users running Windows, Linux and Solaris.
Secunia rated the flaws as 'highly critical' in a security advisory because they could allow a remote attacker to bypass security, gain system access, expose system and sensitive information and manipulate data.
Vulnerabilities were reported in the Java Developer Kit, Java Runtime Environment 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, Software Developer Kit and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier.
Problems included multiple unspecified errors that could allow hackers to use malicious applets or APIs to establish network connections on machines other than the originating host.
Other errors in Java Web Start could also be exploited to read or write local files or find the location of the Java Web Start cache.
An unspecified JRE error could also be used to move or copy arbitrary files on the system.
Sun credited Billy Rios, Dan Boneh, Collin Jackson, Adam Barth, Andrew Bortz, Weidong Shao, David Byrne and Peter Csepely with finding the vulnerabilities.
More details on the patches are available on the official Sun Security Blog.
Four 'critical' patches in monthly update 05 Oct 2007
Vista and XP spared from most dangerous vulnerabilities 12 Sep 2007
Software exposes users to remote code execution vulnerability 07 Sep 2007
Several bug fixes for Java Runtime Environment 26 Mar 2009
Thieves stepping up cyber attacks on organisations, says X-Force division 26 Feb 2010
Productivity suite gets multiple fixes 23 Feb 2010
Fixes on the way for 'critical' vulnerabilities 04 Dec 2009Vulnerability affects IIS 6 and earlier versions 26 Dec 2009
Yorkshire and Humberside selected as CCS Low Carbon Economic Area, as pilot project receives £6.3m grant 18 Mar 2010
Bumper day for British car industry as Nissan and Ford make major low-carbon vehicle manufacturing commitments 18 Mar 2010
The changes include a transformation of draughty homes, plus vast expansion of renewable and nuclear power 18 Mar 2010
More news
Andrew Williams casts his eye over some of the most popular green driving aids on the market 16 Mar 2010
From hydropower hot spots to record-breaking Texan winds, we run down the top stories from the past week 12 Mar 2010
Few debates cast the UK's business and political community in such an unedifying light as the never-ending row over skills.... 12 Mar 2010 More in-depth
Post your comment
Send an email to the Business Green editor at feedback@businessgreen.com
