Sun Java Development Kit Font Serialization Remote Denial of Service Vulnerability
BID:15312
Info
Sun Java Development Kit Font Serialization Remote Denial of Service Vulnerability
| Bugtraq ID: | 15312 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 04 2005 12:00AM |
| Updated: | Nov 04 2005 12:00AM |
| Credit: | Discovered by Marc Schoenefeld <[email protected]>. |
| Vulnerable: |
Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.4.2 _09 Sun JDK (Windows Production Release) 1.4.2 _08 Sun JDK (Solaris Production Release) 1.5 .0_05 Sun JDK (Solaris Production Release) 1.4.2 _09 Sun JDK (Solaris Production Release) 1.4.2 _08 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.4.2 _09 Sun JDK (Linux Production Release) 1.4.2 _08 Sun JDK 1.5 .0_05 Sun JDK 1.4.2 _09 Sun JDK 1.4.2 _08 |
| Not Vulnerable: | |
Discussion
Sun Java Development Kit Font Serialization Remote Denial of Service Vulnerability
The Sun Java Development Kit (JDK) is prone to a remote denial of service vulnerability. This is due to a font deserialization error. It has been demonstrated that this could be exploited to attack JBoss versions that employ affected versions of the JDK, though the issue itself exists in the JDK.
Successful exploitation could cause an application that implements the JDK to fail, denying service to legitimate users.
The Sun Java Development Kit (JDK) is prone to a remote denial of service vulnerability. This is due to a font deserialization error. It has been demonstrated that this could be exploited to attack JBoss versions that employ affected versions of the JDK, though the issue itself exists in the JDK.
Successful exploitation could cause an application that implements the JDK to fail, denying service to legitimate users.
Exploit / POC
Sun Java Development Kit Font Serialization Remote Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun Java Development Kit Font Serialization Remote Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Sun Java Development Kit Font Serialization Remote Denial of Service Vulnerability
References:
References:
- Java Homepage (Sun)
- SunSolve Online (Sun)
- Remotely DoSing JBoss 4.0.2 with serialized java objects (Marc Schoenefeld