Apple Mac OS X Java Window Drawing Handling Remote Code Execution Vulnerability
BID:40240
Info
Apple Mac OS X Java Window Drawing Handling Remote Code Execution Vulnerability
| Bugtraq ID: | 40240 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-0539 |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2010 12:00AM |
| Updated: | May 18 2010 12:00AM |
| Credit: | Jonathan Bringhurst of Northrop Grumman, Jeffrey Czerniak |
| Vulnerable: |
Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.6 Apple Mac OS X 10.5 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Java Window Drawing Handling Remote Code Execution Vulnerability
Apple Mac OS X is prone to a vulnerability that lets attackers run arbitrary code because the software fails to properly handle window drawing in specially crafted Java applets.
Successful exploits will allow an attacker to run arbitrary code in the context of the affected software. Failed exploit attempts may result in denial-of-service conditions.
This issue affects the following:
Mac OS X 10.5.8 (and prior versions)
Mac OS X Server 10.5.8 (and prior versions)
Mac OS X 10.6.3 (and prior versions)
Mac OS X Server 10.6.3 (and prior versions)
Apple Mac OS X is prone to a vulnerability that lets attackers run arbitrary code because the software fails to properly handle window drawing in specially crafted Java applets.
Successful exploits will allow an attacker to run arbitrary code in the context of the affected software. Failed exploit attempts may result in denial-of-service conditions.
This issue affects the following:
Mac OS X 10.5.8 (and prior versions)
Mac OS X Server 10.5.8 (and prior versions)
Mac OS X 10.6.3 (and prior versions)
Mac OS X Server 10.6.3 (and prior versions)
Solution / Fix
Apple Mac OS X Java Window Drawing Handling Remote Code Execution Vulnerability
Solution:
Updates are available; please see the references for more information.
Apple Mac OS X Server 10.5.8
Apple Mac OS X 10.5.8
Apple Mac OS X 10.6.3
Apple Mac OS X Server 10.6.3
Solution:
Updates are available; please see the references for more information.
Apple Mac OS X Server 10.5.8
-
Apple JavaForMacOSX10.5Update7.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.8
-
Apple JavaForMacOSX10.5Update7.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.6.3
-
Apple JavaForMacOSX10.6Update2.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.3
-
Apple JavaForMacOSX10.6Update2.dmg
http://www.apple.com/support/downloads/