Sun Java Wireless Toolkit Unspecified Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	32862
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 15 2008 12:00AM
Updated:	Dec 16 2008 08:22PM
Credit:	Sun
Vulnerable:	Sun Java Wireless Toolkit 2.5.2
Not Vulnerable:	Sun Java Wireless Toolkit 2.5.2_01

Sun Java Wireless Toolkit Unspecified Remote Stack Based Buffer Overflow Vulnerability

Sun Java Wireless Toolkit for CDLC is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the toolkit. Failed attacks will likely cause denial-of-service conditions.

Sun Java Wireless Toolkit 2.5.2 and prior versions are vulnerable.

Sun Java Wireless Toolkit Unspecified Remote Stack Based Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java Wireless Toolkit Unspecified Remote Stack Based Buffer Overflow Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

Sun Java Wireless Toolkit Unspecified Remote Stack Based Buffer Overflow Vulnerability

References:

• 247566 - Buffer Overflow Vulnerabilities in Sun Java Wireless Toolkit for CLDC m (Sun)
  
• Sun Java Wireless Toolkit for CLDC (Sun)