Sun Microsystems has patched a number of flaws in its Java products that affect users running Windows, Linux and Solaris.
Secunia rated the flaws as 'highly critical' in a security advisory because they could allow a remote attacker to bypass security, gain system access, expose system and sensitive information and manipulate data.
Vulnerabilities were reported in the Java Developer Kit, Java Runtime Environment 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, Software Developer Kit and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier.
Problems included multiple unspecified errors that could allow hackers to use malicious applets or APIs to establish network connections on machines other than the originating host.
Other errors in Java Web Start could also be exploited to read or write local files or find the location of the Java Web Start cache.
An unspecified JRE error could also be used to move or copy arbitrary files on the system.
Sun credited Billy Rios, Dan Boneh, Collin Jackson, Adam Barth, Andrew Bortz, Weidong Shao, David Byrne and Peter Csepely with finding the vulnerabilities.
More details on the patches are available on the official Sun Security Blog.
Four 'critical' patches in monthly update 05 Oct 2007
Vista and XP spared from most dangerous vulnerabilities 12 Sep 2007
Software exposes users to remote code execution vulnerability 07 Sep 2007
Experts sound alarms over early disclosure 23 Jul 2008
Leopard remains vulnerable to cache poisoning, say researchers 05 Aug 2008
A wake up call for open source developers, Gartner warns 28 May 2008
Longer range and fast charging capability designed to appeal to suburban commuters and corporate customers 06 Jan 2009
Canadian province on track to phase out coal-fired power plants by 2014, replacing them with a mix of nuclear, gas and renewables 06 Jan 2009
Opposition claims UK is missing out on boom in demand for green products, as Gordon Brown insists his new green investment plans are more ambitious than Obama's, relative to the size of the economy 05 Jan 2009
More news
Why 2009 will deliver both tough times and tide-turning optimism for green businesses 05 Jan 2009
Renewable Energy Credits are designed to spur the development of renewable energy by selling the rights to its environmental benefits. Carbon credits often aim to do much the same thing. Can the two get along? 02 Jan 2009
From financial meltdown to Obama's election victory, the end of the year combined fear and hope for the green business movement 31 Dec 2008 More in-depth
Post your comment
Send an email to the Business Green editor at feedback@businessgreen.com
