Sun Java Runtime Environment 'jpiexp32.dll' Object Name NULL-Pointer Denial Of Service Vulnerability

Bugtraq ID:	27185
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-0012
Remote:	Yes
Local:	No
Published:	Jan 08 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Martin O'Neal is credited with the discovery of this issue.
Vulnerable:	Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5.0_13 Sun JRE (Linux Production Release) 1.5.0_12 Sun JRE (Linux Production Release) 1.5.0_11 Sun JRE (Linux Production Release) 1.5.0_10 Sun JRE (Linux Production Release) 1.5.0_09 Sun JRE (Linux Production Release) 1.5.0_08
Not Vulnerable:	Sun JRE (Linux Production Release) 1.5.0_14

Sun Java Runtime Environment 'jpiexp32.dll' Object Name NULL-Pointer Denial Of Service Vulnerability

Sun Java Runtime Environment is prone to a remote denial-of-service vulnerability when handling certain user-supplied object data.

Attackers can leverage this issue by enticing unsuspecting users to visit specially crafted webpages.

Versions prior to Sun JRE 5.0 update 14 are affected.

Sun Java Runtime Environment 'jpiexp32.dll' Object Name NULL-Pointer Denial Of Service Vulnerability

Attackers can exploit this issue using a browser.

Sun Java Runtime Environment 'jpiexp32.dll' Object Name NULL-Pointer Denial Of Service Vulnerability

Solution:
The vendor released JRE 5.0 update 14 that addresses this issue. Please see the references for more information.

Sun Java Runtime Environment 'jpiexp32.dll' Object Name NULL-Pointer Denial Of Service Vulnerability

References:

• Java SE Runtime Environment 6 Update 3 (Sun)
  
• Java Homepage (Sun)
  
• Corsaire Security Advisory: Sun J2RE DoS issu ("advisories" )