Sun Microsystems has patched a number of flaws in its Java products that affect users running Windows, Linux and Solaris.
Secunia rated the flaws as 'highly critical' in a security advisory because they could allow a remote attacker to bypass security, gain system access, expose system and sensitive information and manipulate data.
Vulnerabilities were reported in the Java Developer Kit, Java Runtime Environment 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, Software Developer Kit and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier.
Problems included multiple unspecified errors that could allow hackers to use malicious applets or APIs to establish network connections on machines other than the originating host.
Other errors in Java Web Start could also be exploited to read or write local files or find the location of the Java Web Start cache.
An unspecified JRE error could also be used to move or copy arbitrary files on the system.
Sun credited Billy Rios, Dan Boneh, Collin Jackson, Adam Barth, Andrew Bortz, Weidong Shao, David Byrne and Peter Csepely with finding the vulnerabilities.
More details on the patches are available on the official Sun Security Blog.
Four 'critical' patches in monthly update 05 Oct 2007
Vista and XP spared from most dangerous vulnerabilities 12 Sep 2007
Software exposes users to remote code execution vulnerability 07 Sep 2007
Remote system access possible unless update is applied 18 Oct 2007
Experts sound alarms over early disclosure 23 Jul 2008
Company poised to join research project designed to optimise carbon capture processes 21 Aug 2008
Call for an investment programme on a scale of the Apollo projects as party pledges to increase pressure on government to toughen up Climate Bill 21 Aug 2008
Businesses using old PCs as thin clients are struggling to achieve expected carbon savings 21 Aug 2008
More news
The impending global water crisis can only be averted if the private sector takes advantage of the water investment opportunities on offer 21 Aug 2008
As the reputational risks associated with greenwash become more apparent every day, Paul Thomas asks why some firms still find themselves overstating their environmental credentials 20 Aug 2008
Emissions trading is widely touted as one of the best mechanisms for tackling climate change, but how do these schemes work and how will your business be affected? Tom Young investigates three of the emissions trading schemes having an impact on UK firms 19 Aug 2008 More in-depth
Post your comment
Send an email to the Business Green editor at feedback@businessgreen.com
