Sun JRE/JDK Java Web Start ActiveX Control ATL Remote Code Execution Vulnerability

BID:35945

Info

Sun JRE/JDK Java Web Start ActiveX Control ATL Remote Code Execution Vulnerability

Bugtraq ID: 35945
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Aug 03 2009 12:00AM
Updated: Sep 04 2009 05:32PM
Credit: Microsoft
Vulnerable: Sun SDK (Windows Production Release) 1.4.2 _15
Sun SDK (Windows Production Release) 1.4.2 _10
Sun SDK (Windows Production Release) 1.4.2 _09
Sun SDK (Windows Production Release) 1.4.2 _08
Sun SDK (Windows Production Release) 1.4.2 _05
Sun SDK (Windows Production Release) 1.4.2 _04
Sun SDK (Windows Production Release) 1.4.2 _03
Sun SDK (Windows Production Release) 1.4.2
Sun SDK (Windows Production Release) 1.4.2_20
Sun SDK (Windows Production Release) 1.4.2_19
Sun SDK (Windows Production Release) 1.4.2_18
Sun SDK (Windows Production Release) 1.4.2_17
Sun SDK (Windows Production Release) 1.4.2_16
Sun SDK (Windows Production Release) 1.4.2_15
Sun SDK (Windows Production Release) 1.4.2_14
Sun SDK (Windows Production Release) 1.4.2_13
Sun SDK (Windows Production Release) 1.4.2_12
Sun SDK (Windows Production Release) 1.4.2_11
Sun SDK (Solaris Production Release) 1.4.2 _15
Sun SDK (Solaris Production Release) 1.4.2 _10
Sun SDK (Solaris Production Release) 1.4.2 _09
Sun SDK (Solaris Production Release) 1.4.2 _08
Sun SDK (Solaris Production Release) 1.4.2 _05
Sun SDK (Solaris Production Release) 1.4.2 _04
Sun SDK (Solaris Production Release) 1.4.2 _03
Sun SDK (Solaris Production Release) 1.4.2
Sun SDK (Solaris Production Release) 1.4.2_20
Sun SDK (Solaris Production Release) 1.4.2_19
Sun SDK (Solaris Production Release) 1.4.2_18
Sun SDK (Solaris Production Release) 1.4.2_17
Sun SDK (Solaris Production Release) 1.4.2_16
Sun SDK (Solaris Production Release) 1.4.2_15
Sun SDK (Solaris Production Release) 1.4.2_14
Sun SDK (Solaris Production Release) 1.4.2_13
Sun SDK (Solaris Production Release) 1.4.2_12
Sun SDK (Solaris Production Release) 1.4.2_11
Sun SDK (Linux Production Release) 1.4.2 _15
Sun SDK (Linux Production Release) 1.4.2 _10
Sun SDK (Linux Production Release) 1.4.2 _09
Sun SDK (Linux Production Release) 1.4.2 _08
Sun SDK (Linux Production Release) 1.4.2 _05
Sun SDK (Linux Production Release) 1.4.2 _04
Sun SDK (Linux Production Release) 1.4.2 _03
Sun SDK (Linux Production Release) 1.4.2 _02
Sun SDK (Linux Production Release) 1.4.2 _01
Sun SDK (Linux Production Release) 1.4.2
Sun SDK (Linux Production Release) 1.4.2_20
Sun SDK (Linux Production Release) 1.4.2_19
Sun SDK (Linux Production Release) 1.4.2_18
Sun SDK (Linux Production Release) 1.4.2_17
Sun SDK (Linux Production Release) 1.4.2_16
Sun SDK (Linux Production Release) 1.4.2_15
Sun SDK (Linux Production Release) 1.4.2_14
Sun SDK (Linux Production Release) 1.4.2_13
Sun SDK (Linux Production Release) 1.4.2_12
Sun SDK (Linux Production Release) 1.4.2_11
Sun JRE (Windows Production Release) 1.5 _06
Sun JRE (Windows Production Release) 1.5 _05
Sun JRE (Windows Production Release) 1.5 _04
Sun JRE (Windows Production Release) 1.5 _03
Sun JRE (Windows Production Release) 1.5 _02
Sun JRE (Windows Production Release) 1.5 _01
Sun JRE (Windows Production Release) 1.4.2 _10
Sun JRE (Windows Production Release) 1.4.2 _09
Sun JRE (Windows Production Release) 1.4.2 _08
Sun JRE (Windows Production Release) 1.4.2 _07
Sun JRE (Windows Production Release) 1.4.2 _06
Sun JRE (Windows Production Release) 1.4.2 _05
Sun JRE (Windows Production Release) 1.4.2 _05
Sun JRE (Windows Production Release) 1.4.2 _04
Sun JRE (Windows Production Release) 1.4.2 _03
Sun JRE (Windows Production Release) 1.4.2 _02
Sun JRE (Windows Production Release) 1.4.2 _01
Sun JRE (Windows Production Release) 1.4.2
Sun JRE (Windows Production Release) 1.6.0_2
Sun JRE (Windows Production Release) 1.6.0_11
Sun JRE (Windows Production Release) 1.6.0_03
Sun JRE (Windows Production Release) 1.6.0_02
Sun JRE (Windows Production Release) 1.6.0_01
Sun JRE (Windows Production Release) 1.5.0_17
Sun JRE (Windows Production Release) 1.5.0_14
Sun JRE (Windows Production Release) 1.5.0_13
Sun JRE (Windows Production Release) 1.5.0_12
Sun JRE (Windows Production Release) 1.5.0_11
Sun JRE (Windows Production Release) 1.5.0_10
Sun JRE (Windows Production Release) 1.5.0_10
Sun JRE (Windows Production Release) 1.5.0.0_09
Sun JRE (Windows Production Release) 1.5.0.0_08
Sun JRE (Windows Production Release) 1.5.0.0_07
Sun JRE (Windows Production Release) 1.4.2_20
Sun JRE (Windows Production Release) 1.4.2_19
Sun JRE (Windows Production Release) 1.4.2_18
Sun JRE (Windows Production Release) 1.4.2_17
Sun JRE (Windows Production Release) 1.4.2_16
Sun JRE (Windows Production Release) 1.4.2_15
Sun JRE (Windows Production Release) 1.4.2_14
Sun JRE (Windows Production Release) 1.4.2_13
Sun JRE (Windows Production Release) 1.4.2_12
Sun JRE (Windows Production Release) 1.4.2_11
Sun JRE (Solaris Production Release) 1.5 _15
Sun JRE (Solaris Production Release) 1.5 _06
Sun JRE (Solaris Production Release) 1.5 _05
Sun JRE (Solaris Production Release) 1.5 _04
Sun JRE (Solaris Production Release) 1.5 _03
Sun JRE (Solaris Production Release) 1.5 _02
Sun JRE (Solaris Production Release) 1.5 _01
Sun JRE (Solaris Production Release) 1.5
Sun JRE (Solaris Production Release) 1.4.2 _10
Sun JRE (Solaris Production Release) 1.4.2 _09
Sun JRE (Solaris Production Release) 1.4.2 _08
Sun JRE (Solaris Production Release) 1.4.2 _07
Sun JRE (Solaris Production Release) 1.4.2 _06
Sun JRE (Solaris Production Release) 1.4.2 _05
Sun JRE (Solaris Production Release) 1.4.2 _04
+ Opera Software Opera Web Browser 7.54
Sun JRE (Solaris Production Release) 1.4.2 _03
Sun JRE (Solaris Production Release) 1.4.2 _02
Sun JRE (Solaris Production Release) 1.4.2 _01
Sun JRE (Solaris Production Release) 1.4.2
Sun JRE (Solaris Production Release) 1.6.0_2
Sun JRE (Solaris Production Release) 1.6.0_11
Sun JRE (Solaris Production Release) 1.6.0_03
Sun JRE (Solaris Production Release) 1.6.0_02
Sun JRE (Solaris Production Release) 1.6.0_01
Sun JRE (Solaris Production Release) 1.5.0_17
Sun JRE (Solaris Production Release) 1.5.0_14
Sun JRE (Solaris Production Release) 1.5.0_13
Sun JRE (Solaris Production Release) 1.5.0_12
Sun JRE (Solaris Production Release) 1.5.0_11
Sun JRE (Solaris Production Release) 1.5.0_10
Sun JRE (Solaris Production Release) 1.5.0.0_09
Sun JRE (Solaris Production Release) 1.5.0.0_08
Sun JRE (Solaris Production Release) 1.5.0.0_07
Sun JRE (Solaris Production Release) 1.4.2_20
Sun JRE (Solaris Production Release) 1.4.2_19
Sun JRE (Solaris Production Release) 1.4.2_18
Sun JRE (Solaris Production Release) 1.4.2_17
Sun JRE (Solaris Production Release) 1.4.2_16
Sun JRE (Solaris Production Release) 1.4.2_15
Sun JRE (Solaris Production Release) 1.4.2_14
Sun JRE (Solaris Production Release) 1.4.2_13
Sun JRE (Solaris Production Release) 1.4.2_12
Sun JRE (Solaris Production Release) 1.4.2_11
Sun JRE (Linux Production Release) 1.6 _13
Sun JRE (Linux Production Release) 1.6 _12
Sun JRE (Linux Production Release) 1.6 _10
Sun JRE (Linux Production Release) 1.6 _07
Sun JRE (Linux Production Release) 1.6 _06
Sun JRE (Linux Production Release) 1.6 _05
Sun JRE (Linux Production Release) 1.6 _04
Sun JRE (Linux Production Release) 1.5 _18
Sun JRE (Linux Production Release) 1.5 _16
Sun JRE (Linux Production Release) 1.5 _15
Sun JRE (Linux Production Release) 1.5 _07
Sun JRE (Linux Production Release) 1.5 _06
Sun JRE (Linux Production Release) 1.5 _05
Sun JRE (Linux Production Release) 1.5 _04
Sun JRE (Linux Production Release) 1.5 _03
Sun JRE (Linux Production Release) 1.5 _02
Sun JRE (Linux Production Release) 1.5 _01
Sun JRE (Linux Production Release) 1.5 .0 beta
Sun JRE (Linux Production Release) 1.5
Sun JRE (Linux Production Release) 1.4.2 _10-b03
Sun JRE (Linux Production Release) 1.4.2 _10
Sun JRE (Linux Production Release) 1.4.2 _09
Sun JRE (Linux Production Release) 1.4.2 _08
Sun JRE (Linux Production Release) 1.4.2 _07
Sun JRE (Linux Production Release) 1.4.2 _06
Sun JRE (Linux Production Release) 1.4.2 _05
Sun JRE (Linux Production Release) 1.4.2 _04
+ Opera Software Opera Web Browser 7.54
Sun JRE (Linux Production Release) 1.4.2 _03
Sun JRE (Linux Production Release) 1.4.2 _02
Sun JRE (Linux Production Release) 1.4.2 _01
Sun JRE (Linux Production Release) 1.4.2
Sun JRE (Linux Production Release) 1.6.0_2
Sun JRE (Linux Production Release) 1.6.0_11
Sun JRE (Linux Production Release) 1.6.0_03
Sun JRE (Linux Production Release) 1.6.0_03
Sun JRE (Linux Production Release) 1.6.0_02
Sun JRE (Linux Production Release) 1.6.0_01
Sun JRE (Linux Production Release) 1.5.0_17
Sun JRE (Linux Production Release) 1.5.0_14
Sun JRE (Linux Production Release) 1.5.0_13
Sun JRE (Linux Production Release) 1.5.0_13
Sun JRE (Linux Production Release) 1.5.0_12
Sun JRE (Linux Production Release) 1.5.0_12
Sun JRE (Linux Production Release) 1.5.0_11
Sun JRE (Linux Production Release) 1.5.0_10
Sun JRE (Linux Production Release) 1.5.0_09
Sun JRE (Linux Production Release) 1.5.0_08
Sun JRE (Linux Production Release) 1.4.2_20
Sun JRE (Linux Production Release) 1.4.2_19
Sun JRE (Linux Production Release) 1.4.2_18
Sun JRE (Linux Production Release) 1.4.2_17
Sun JRE (Linux Production Release) 1.4.2_16
Sun JRE (Linux Production Release) 1.4.2_15
Sun JRE (Linux Production Release) 1.4.2_14
Sun JRE (Linux Production Release) 1.4.2_13
Sun JRE (Linux Production Release) 1.4.2_12
Sun JRE (Linux Production Release) 1.4.2_11
Sun JRE 6.0 Update 3
Sun JRE 6.0 Update 2
Sun JRE 6.0 Update 14
Sun JRE 6.0 Update 11
Sun JRE 6.0 Update 1
Sun JRE 5.0 Update 9
Sun JRE 5.0 Update 8
Sun JRE 5.0 Update 7
Sun JRE 5.0 Update 6
Sun JRE 5.0 Update 17
Sun JRE 5.0 Update 14
Sun JRE 5.0 Update 13
Sun JRE 5.0 Update 12
Sun JRE 5.0 Update 11
Sun JRE 5.0 Update 10
Sun JDK (Windows Production Release) 1.5 0_10
Sun JDK (Windows Production Release) 1.5 .0_05
Sun JDK (Windows Production Release) 1.5 .0_04
Sun JDK (Windows Production Release) 1.5 .0_03
Sun JDK (Windows Production Release) 1.6.0_03
Sun JDK (Windows Production Release) 1.6.0_02
Sun JDK (Windows Production Release) 1.6.0_01-b06
Sun JDK (Windows Production Release) 1.6.0_01
Sun JDK (Windows Production Release) 1.5.0_16
Sun JDK (Windows Production Release) 1.5.0_13
Sun JDK (Windows Production Release) 1.5.0_12
Sun JDK (Windows Production Release) 1.5.0_11-b03
Sun JDK (Windows Production Release) 1.5.0_07-b03
Sun JDK (Windows Production Release) 1.5.0.0_11
Sun JDK (Windows Production Release) 1.5.0.0_09
Sun JDK (Windows Production Release) 1.5.0.0_08
Sun JDK (Windows Production Release) 1.5.0.0_06
Sun JDK (Solaris Production Release) 1.5 0_10
Sun JDK (Solaris Production Release) 1.5 0_09
Sun JDK (Solaris Production Release) 1.5 0_09
Sun JDK (Solaris Production Release) 1.5 0_03
Sun JDK (Solaris Production Release) 1.5 _15
Sun JDK (Solaris Production Release) 1.5 _06
Sun JDK (Solaris Production Release) 1.5 .0_05
Sun JDK (Solaris Production Release) 1.5 .0_04
Sun JDK (Solaris Production Release) 1.5 .0_03
Sun JDK (Solaris Production Release) 1.6.0_03
Sun JDK (Solaris Production Release) 1.6.0_02
Sun JDK (Solaris Production Release) 1.6.0_01
Sun JDK (Solaris Production Release) 1.5.0_16
Sun JDK (Solaris Production Release) 1.5.0_13
Sun JDK (Solaris Production Release) 1.5.0_12
Sun JDK (Solaris Production Release) 1.5.0_11
Sun JDK (Linux Production Release) 1.6 _14
Sun JDK (Linux Production Release) 1.6 _13
Sun JDK (Linux Production Release) 1.6 _11
Sun JDK (Linux Production Release) 1.6 _10
Sun JDK (Linux Production Release) 1.6 _07
Sun JDK (Linux Production Release) 1.6 _06
Sun JDK (Linux Production Release) 1.6 _05
Sun JDK (Linux Production Release) 1.6 _04
Sun JDK (Linux Production Release) 1.6 _01-b06
Sun JDK (Linux Production Release) 1.6 _01
Sun JDK (Linux Production Release) 1.6 _01
Sun JDK (Linux Production Release) 1.6
Sun JDK (Linux Production Release) 1.5 _18
Sun JDK (Linux Production Release) 1.5 _17
Sun JDK (Linux Production Release) 1.5 _15
Sun JDK (Linux Production Release) 1.5 _14
Sun JDK (Linux Production Release) 1.5 _11-b03
Sun JDK (Linux Production Release) 1.5 _07-b03
Sun JDK (Linux Production Release) 1.5 _02
Sun JDK (Linux Production Release) 1.5 _01
Sun JDK (Linux Production Release) 1.6.0_03
Sun JDK (Linux Production Release) 1.6.0_02
Sun JDK 1.5 _12
Sun JDK 1.5 .0_05
Sun JDK 1.5
Sun JDK 6.0 Update 3
Sun JDK 6.0 Update 2
Sun JDK 6.0 Update 1
Sun JDK 5.0 Update 9
Sun JDK 5.0 Update 8
Sun JDK 5.0 Update 7
Sun JDK 5.0 Update 6
Sun JDK 5.0 Update 5
Sun JDK 5.0 Update 4
Sun JDK 5.0 Update 3
Sun JDK 5.0 Update 16
Sun JDK 5.0 Update 16
Sun JDK 5.0 Update 13
Sun JDK 5.0 Update 12
Sun JDK 5.0 Update 11
Sun JDK 5.0 Update 10
Sun JDK 1.5.0.11
Pardus Linux 2009 0
Nortel Networks Self-Service WVADS 0
Nortel Networks Self-Service VoiceXML 0
Nortel Networks Self-Service Speech Server 0
Nortel Networks Self-Service Peri Application 0
Nortel Networks Self-Service MPS 500 0
Nortel Networks Self-Service MPS 1000 0
Nortel Networks Self-Service CCXML 0
Nortel Networks Contact Center - CCT 0
IBM Java SE 6.0 SR5
IBM J2SE 5.0 SR9
IBM J2SE 5.0 SR10
Not Vulnerable: Sun SDK (Windows Production Release) 1.4.2_22
Sun SDK (Solaris Production Release) 1.4.2_22
Sun SDK (Linux Production Release) 1.4.2_22
Sun JRE (Windows Production Release) 1.6.0_15
Sun JRE (Windows Production Release) 1.5.0_20
Sun JRE (Windows Production Release) 1.4.2_22
Sun JRE (Solaris Production Release) 1.6.0_15
Sun JRE (Solaris Production Release) 1.5.0_20
Sun JRE (Solaris Production Release) 1.4.2_22
Sun JRE (Linux Production Release) 1.6.0_15
Sun JRE (Linux Production Release) 1.5.0_20
Sun JRE (Linux Production Release) 1.4.2_22
Sun JRE 6.0 Update 15
Sun JRE 5.0 Update 20
Sun JDK (Windows Production Release) 1.6.0_15
Sun JDK (Windows Production Release) 1.5.0_20
Sun JDK (Solaris Production Release) 1.6.0_15
Sun JDK (Solaris Production Release) 1.5.0_20
Sun JDK (Linux Production Release) 1.6.0_15
Sun JDK (Linux Production Release) 1.5.0_20
Sun JDK 6 Update 15
Sun JDK 5.0 Update 20

Discussion

Sun JRE/JDK Java Web Start ActiveX Control ATL Remote Code Execution Vulnerability

Java Web Start ActiveX Control included in Sun JRE and JDK is prone to a remote code-execution vulnerability.

A remote attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage. If successful, the attacker can run arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely result in a denial-of-service condition.

This issue is caused by the vulnerabilities described in Microsoft security advisory 973883 and is related to the following BIDs:

35828 Microsoft Visual Studio Active Template Library COM Object Remote Code Execution Vulnerability
35830 Microsoft Visual Studio Active Template Library NULL String Information Disclosure Vulnerability
35832 Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability

This issue affects the following:

JDK and JRE 6 Update 14 and prior
JDK and JRE 5.0 Update 19 and prior

NOTE: This issue was previously covered in BID 35922 (Sun Java SE Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Exploit / POC

Sun JRE/JDK Java Web Start ActiveX Control ATL Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Sun JRE/JDK Java Web Start ActiveX Control ATL Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Sun JRE (Windows Production Release) 1.5.0_10

Sun JRE (Linux Production Release) 1.5.0_12

Sun JDK 5.0 Update 8

Sun JRE (Windows Production Release) 1.5.0_14

Sun JDK (Solaris Production Release) 1.5.0_12

Sun JDK (Windows Production Release) 1.6.0_01

Sun JRE (Linux Production Release) 1.5.0_10

Sun JRE (Solaris Production Release) 1.5.0_13

Sun JDK 5.0 Update 5

Sun JRE 6.0 Update 3

Sun JDK 5.0 Update 7

Sun JDK (Windows Production Release) 1.5.0.0_08

Sun JRE 6.0 Update 14

Sun JRE 5.0 Update 17

Sun JRE 6.0 Update 2

Sun JDK (Solaris Production Release) 1.5.0_16

Sun JRE 5.0 Update 12

Sun JDK (Windows Production Release) 1.5.0.0_09

Sun JDK 5.0 Update 11

Sun JDK (Solaris Production Release) 1.5.0_11

Sun JDK (Solaris Production Release) 1.6.0_02

Sun JDK 1.5.0.11

Sun JRE (Linux Production Release) 1.5.0_14

Sun JDK (Windows Production Release) 1.6.0_01-b06

Sun JRE (Solaris Production Release) 1.6.0_02

Sun JRE (Linux Production Release) 1.5.0_12

Sun JRE (Windows Production Release) 1.6.0_03

Sun JRE (Linux Production Release) 1.6.0_03

Sun JRE (Linux Production Release) 1.6.0_01

Sun JRE 5.0 Update 6

Sun JRE (Windows Production Release) 1.5 _01

Sun JDK (Linux Production Release) 1.5 _02

Sun JRE (Windows Production Release) 1.5 _02

Sun JDK (Solaris Production Release) 1.5 .0_03

Sun JRE (Linux Production Release) 1.5 _03

Sun JDK (Solaris Production Release) 1.5 .0_04

Sun JDK (Solaris Production Release) 1.5 _06

Sun JDK (Solaris Production Release) 1.5 0_09

Sun JDK 1.5

Sun JRE (Linux Production Release) 1.5 _15

Sun JRE (Windows Production Release) 1.5 _06

Sun JRE (Solaris Production Release) 1.5

Sun JRE (Linux Production Release) 1.5 .0 beta

Sun JDK (Solaris Production Release) 1.5 0_03

Sun JDK 1.5 .0_05

Sun JDK (Linux Production Release) 1.5 _15

Sun JRE (Linux Production Release) 1.5 _02

Sun JRE (Linux Production Release) 1.5 _06

Sun JDK (Linux Production Release) 1.5 _01

Sun JRE (Linux Production Release) 1.6 _07

Sun JDK (Linux Production Release) 1.6 _04

Sun JDK (Linux Production Release) 1.6 _07

References

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report