Sun Java Runtime Environment Font Object Assertion Failure Denial Of Service Vulnerability

Bugtraq ID:	10623
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 28 2004 12:00AM
Updated:	Jun 28 2004 12:00AM
Credit:	Disclosure of this issue is credited to Marc Schoenefeld <[email protected]>.
Vulnerable:	Sun JRE (Windows Production Release) 1.4.2 _04 Sun JRE (Windows Production Release) 1.4.2 _03 Sun JRE (Windows Production Release) 1.4.2 _02 Sun JRE (Windows Production Release) 1.4.2 _01 Sun JRE (Windows Production Release) 1.4.2 Sun JRE (Windows Production Release) 1.4.1 _07 Sun JRE (Windows Production Release) 1.4.1 _03 Sun JRE (Windows Production Release) 1.4.1 _02 Sun JRE (Windows Production Release) 1.4.1 _01 + Opera Software Opera Web Browser 7.11 j + Opera Software Opera Web Browser 7.11 Sun JRE (Windows Production Release) 1.4.1 Sun JRE (Solaris Production Release) 1.4.2 _04 + Opera Software Opera Web Browser 7.54 Sun JRE (Solaris Production Release) 1.4.2 _03 Sun JRE (Solaris Production Release) 1.4.2 _02 Sun JRE (Solaris Production Release) 1.4.2 _01 Sun JRE (Solaris Production Release) 1.4.2 Sun JRE (Solaris Production Release) 1.4.1 _03 Sun JRE (Solaris Production Release) 1.4.1 _02 Sun JRE (Solaris Production Release) 1.4.1 _01 + Opera Software Opera Web Browser 7.11 Sun JRE (Solaris Production Release) 1.4.1 Sun JRE (Linux Production Release) 1.4.2 _04 + Opera Software Opera Web Browser 7.54 Sun JRE (Linux Production Release) 1.4.2 _03 Sun JRE (Linux Production Release) 1.4.2 _02 Sun JRE (Linux Production Release) 1.4.2 _01 Sun JRE (Linux Production Release) 1.4.2 Sun JRE (Linux Production Release) 1.4.1 _03 Sun JRE (Linux Production Release) 1.4.1 _02 Sun JRE (Linux Production Release) 1.4.1 _01 + Opera Software Opera Web Browser 7.11 Sun JRE (Linux Production Release) 1.4.1
Not Vulnerable:

Sun Java Runtime Environment Font Object Assertion Failure Denial Of Service Vulnerability

The Sun Java Runtime Environment Font object is reportedly vulnerable to an assertion failure denial of service vulnerability. This issue is due to a failure of the process to handle exceptional conditions when processing font objects.

This issue is reported to affect Java Runtime Environment versions 1.4.1 through 1.4.2; it is likely however that other versions are also affected. This issue will crash Internet browsers running an affected Java plug-in as well.

This issue may be exploited by an attacker to cause a vulnerable application, as well as all processes spawned from the application, to crash, denying service to legitimate users. Due to the scope of the crash, data loss may occur.

Sun Java Runtime Environment Font Object Assertion Failure Denial Of Service Vulnerability

The following proof of concept exploit has been provided:

• /data/vulnerabilities/exploits/JREFontObjectAssertionExploit.java

Sun Java Runtime Environment Font Object Assertion Failure Denial Of Service Vulnerability

Solution:
It has been reported that this issue is resolved in the Java Runtime Environment version 1.4.2_05, although this has not been verified. When new information becomes available this BID will be updated.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Java Runtime Environment Font Object Assertion Failure Denial Of Service Vulnerability

References:

• Harmful applet crashing with assertion (Marc Schoenefeld )
  
• Java 2 Runtime Environment 1.4 Homepage (Sun Microsystems)
  
• Java applet crashing with native assertion (Marc Schoenefeld )
  
• Re: Java applet crashing with native assertion (Jack Lloyd )