Microsoft JVM Cross-Domain Applet Unauthorized Communication Vulnerability
BID:10688
Info
Microsoft JVM Cross-Domain Applet Unauthorized Communication Vulnerability
| Bugtraq ID: | 10688 |
| Class: | Access Validation Error |
| CVE: |
CVE-2004-0723 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 10 2004 12:00AM |
| Updated: | Jul 12 2009 06:16AM |
| Credit: | Discovered by Marc Schoenefeld <[email protected]>. |
| Vulnerable: |
Microsoft JVM 5.0.3810 Microsoft JVM 1.1 |
| Not Vulnerable: | |
Discussion
Microsoft JVM Cross-Domain Applet Unauthorized Communication Vulnerability
It has been reported that applets running in the Microsoft JVM share a common data structure that can be both written to and read from by any applet, regardless of domain association. This is in violation of the above security policy.
It should be noted that the Java Runtime Environment (JRE) and Software Development Kit (SDK) version 1.4.2_04 and earlier are not vulnerabe to this issue.
It has been reported that applets running in the Microsoft JVM share a common data structure that can be both written to and read from by any applet, regardless of domain association. This is in violation of the above security policy.
It should be noted that the Java Runtime Environment (JRE) and Software Development Kit (SDK) version 1.4.2_04 and earlier are not vulnerabe to this issue.
Exploit / POC
Microsoft JVM Cross-Domain Applet Unauthorized Communication Vulnerability
Proof of concept code has been developed. The applets on each of the following URLs will demonstrate the vulnerability:
http://www.tauwerkkunst.de/javatest/SiteA/CovAppletFNMap.html
http://www.beauchamp.de/tauwerk/javatest/SiteA/CovAppletFNMap.html
Proof of concept code has been developed. The applets on each of the following URLs will demonstrate the vulnerability:
http://www.tauwerkkunst.de/javatest/SiteA/CovAppletFNMap.html
http://www.beauchamp.de/tauwerk/javatest/SiteA/CovAppletFNMap.html
Solution / Fix
Microsoft JVM Cross-Domain Applet Unauthorized Communication Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft JVM Cross-Domain Applet Unauthorized Communication Vulnerability
References:
References:
- Covert Channels allow Cross-Site-Java in Microsoft VM (Marc Schoenefeld