Oracle Java 'JFileChooser' Security Bypass Vulnerability

BID:46223

Info

Oracle Java 'JFileChooser' Security Bypass Vulnerability

Bugtraq ID: 46223
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Feb 07 2011 12:00AM
Updated: Apr 13 2015 08:16PM
Credit: Sami Koivu
Vulnerable: Ubuntu Ubuntu Linux 9.10 sparc
Ubuntu Ubuntu Linux 9.10 powerpc
Ubuntu Ubuntu Linux 9.10 lpia
Ubuntu Ubuntu Linux 9.10 i386
Ubuntu Ubuntu Linux 9.10 amd64
Ubuntu Ubuntu Linux 8.04 LTS sparc
Ubuntu Ubuntu Linux 8.04 LTS powerpc
Ubuntu Ubuntu Linux 8.04 LTS lpia
Ubuntu Ubuntu Linux 8.04 LTS i386
Ubuntu Ubuntu Linux 8.04 LTS amd64
Ubuntu Ubuntu Linux 10.10 powerpc
Ubuntu Ubuntu Linux 10.10 i386
Ubuntu Ubuntu Linux 10.10 amd64
Ubuntu Ubuntu Linux 10.04 sparc
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 10.04 i386
Ubuntu Ubuntu Linux 10.04 amd64
SuSE SUSE Linux Enterprise Server 11 SP1
SuSE SUSE Linux Enterprise Server 10 SP3
SuSE SUSE Linux Enterprise SDK 11 SP1
SuSE SUSE Linux Enterprise Java 11 SP1
SuSE SUSE Linux Enterprise Java 10 SP3
SuSE SUSE Linux Enterprise 11 SP1
SuSE SUSE Linux Enterprise 11
SuSE openSUSE 11.3
Sun JRE (Windows Production Release) 1.6 _17
Sun JRE (Windows Production Release) 1.6 _13
Sun JRE (Windows Production Release) 1.6 _12
Sun JRE (Windows Production Release) 1.6 _10
Sun JRE (Windows Production Release) 1.6 _07
Sun JRE (Windows Production Release) 1.6 _06
Sun JRE (Windows Production Release) 1.6 _05
Sun JRE (Windows Production Release) 1.6 _04
Sun JRE (Windows Production Release) 1.6
Sun JRE (Windows Production Release) 1.5 _22
Sun JRE (Windows Production Release) 1.5 _18
Sun JRE (Windows Production Release) 1.5 _16
Sun JRE (Windows Production Release) 1.5 _15
Sun JRE (Windows Production Release) 1.5 _06
Sun JRE (Windows Production Release) 1.5 _05
Sun JRE (Windows Production Release) 1.5 _04
Sun JRE (Windows Production Release) 1.5 _03
Sun JRE (Windows Production Release) 1.5 _02
Sun JRE (Windows Production Release) 1.5 _01
Sun JRE (Windows Production Release) 1.5
Sun JRE (Windows Production Release) 1.6.0_23
Sun JRE (Windows Production Release) 1.6.0_21
Sun JRE (Windows Production Release) 1.6.0_20
Sun JRE (Windows Production Release) 1.6.0_2
Sun JRE (Windows Production Release) 1.6.0_19
Sun JRE (Windows Production Release) 1.6.0_18
Sun JRE (Windows Production Release) 1.6.0_15
Sun JRE (Windows Production Release) 1.6.0_14
Sun JRE (Windows Production Release) 1.6.0_11
Sun JRE (Windows Production Release) 1.6.0_03
Sun JRE (Windows Production Release) 1.6.0_02
Sun JRE (Windows Production Release) 1.6.0_01
Sun JRE (Windows Production Release) 1.5.0_25
Sun JRE (Windows Production Release) 1.5.0_23
Sun JRE (Windows Production Release) 1.5.0_20
Sun JRE (Windows Production Release) 1.5.0_17
Sun JRE (Windows Production Release) 1.5.0_14
Sun JRE (Windows Production Release) 1.5.0_13
Sun JRE (Windows Production Release) 1.5.0_12
Sun JRE (Windows Production Release) 1.5.0_11
Sun JRE (Windows Production Release) 1.5.0_10
Sun JRE (Windows Production Release) 1.5.0.0_09
Sun JRE (Windows Production Release) 1.5.0.0_08
Sun JRE (Windows Production Release) 1.5.0.0_07
Sun JRE (Solaris Production Release) 1.6 _17
Sun JRE (Solaris Production Release) 1.6 _13
Sun JRE (Solaris Production Release) 1.6 _12
Sun JRE (Solaris Production Release) 1.6 _10
Sun JRE (Solaris Production Release) 1.6 _07
Sun JRE (Solaris Production Release) 1.6 _06
Sun JRE (Solaris Production Release) 1.6 _05
Sun JRE (Solaris Production Release) 1.6 _04
Sun JRE (Solaris Production Release) 1.6
Sun JRE (Solaris Production Release) 1.5 _22
Sun JRE (Solaris Production Release) 1.5 _18
Sun JRE (Solaris Production Release) 1.5 _16
Sun JRE (Solaris Production Release) 1.5 _15
Sun JRE (Solaris Production Release) 1.5 _06
Sun JRE (Solaris Production Release) 1.5 _05
Sun JRE (Solaris Production Release) 1.5 _04
Sun JRE (Solaris Production Release) 1.5 _03
Sun JRE (Solaris Production Release) 1.5 _02
Sun JRE (Solaris Production Release) 1.5 _01
Sun JRE (Solaris Production Release) 1.5
Sun JRE (Solaris Production Release) 1.6.0_21
Sun JRE (Solaris Production Release) 1.6.0_2
Sun JRE (Solaris Production Release) 1.6.0_19
Sun JRE (Solaris Production Release) 1.6.0_18
Sun JRE (Solaris Production Release) 1.6.0_15
Sun JRE (Solaris Production Release) 1.6.0_14
Sun JRE (Solaris Production Release) 1.6.0_11
Sun JRE (Solaris Production Release) 1.6.0_03
Sun JRE (Solaris Production Release) 1.6.0_02
Sun JRE (Solaris Production Release) 1.6.0_01
Sun JRE (Solaris Production Release) 1.5.0_25
Sun JRE (Solaris Production Release) 1.5.0_23
Sun JRE (Solaris Production Release) 1.5.0_20
Sun JRE (Solaris Production Release) 1.5.0_17
Sun JRE (Solaris Production Release) 1.5.0_14
Sun JRE (Solaris Production Release) 1.5.0_13
Sun JRE (Solaris Production Release) 1.5.0_12
Sun JRE (Solaris Production Release) 1.5.0_11
Sun JRE (Solaris Production Release) 1.5.0_10
Sun JRE (Solaris Production Release) 1.5.0.0_09
Sun JRE (Solaris Production Release) 1.5.0.0_08
Sun JRE (Solaris Production Release) 1.5.0.0_07
Sun JRE (Linux Production Release) 1.6 _17
Sun JRE (Linux Production Release) 1.6 _13
Sun JRE (Linux Production Release) 1.6 _12
Sun JRE (Linux Production Release) 1.6 _10
Sun JRE (Linux Production Release) 1.6 _07
Sun JRE (Linux Production Release) 1.6 _06
Sun JRE (Linux Production Release) 1.6 _05
Sun JRE (Linux Production Release) 1.6 _04
Sun JRE (Linux Production Release) 1.6
Sun JRE (Linux Production Release) 1.5 _22
Sun JRE (Linux Production Release) 1.5 _18
Sun JRE (Linux Production Release) 1.5 _16
Sun JRE (Linux Production Release) 1.5 _15
Sun JRE (Linux Production Release) 1.5 _07
Sun JRE (Linux Production Release) 1.5 _06
Sun JRE (Linux Production Release) 1.5 _05
Sun JRE (Linux Production Release) 1.5 _04
Sun JRE (Linux Production Release) 1.5 _03
Sun JRE (Linux Production Release) 1.5 _02
Sun JRE (Linux Production Release) 1.5 _01
Sun JRE (Linux Production Release) 1.5 .0 beta
Sun JRE (Linux Production Release) 1.5
Sun JRE (Linux Production Release) 1.6.0_23
Sun JRE (Linux Production Release) 1.6.0_21
Sun JRE (Linux Production Release) 1.6.0_20
Sun JRE (Linux Production Release) 1.6.0_19
Sun JRE (Linux Production Release) 1.6.0_18
Sun JRE (Linux Production Release) 1.6.0_15
Sun JRE (Linux Production Release) 1.6.0_14
Sun JRE (Linux Production Release) 1.6.0_11
Sun JRE (Linux Production Release) 1.6.0_03
Sun JRE (Linux Production Release) 1.6.0_02
Sun JRE (Linux Production Release) 1.6.0_01
Sun JRE (Linux Production Release) 1.5.0_25
Sun JRE (Linux Production Release) 1.5.0_23
Sun JRE (Linux Production Release) 1.5.0_20
Sun JRE (Linux Production Release) 1.5.0_17
Sun JRE (Linux Production Release) 1.5.0_14
Sun JRE (Linux Production Release) 1.5.0_13
Sun JRE (Linux Production Release) 1.5.0_12
Sun JRE (Linux Production Release) 1.5.0_11
Sun JRE (Linux Production Release) 1.5.0_10
Sun JRE (Linux Production Release) 1.5.0_09
Sun JRE (Linux Production Release) 1.5.0_08
Sun JDK (Windows Production Release) 1.6 _17
Sun JDK (Windows Production Release) 1.6 _14
Sun JDK (Windows Production Release) 1.6 _13
Sun JDK (Windows Production Release) 1.6 _11
Sun JDK (Windows Production Release) 1.6 _10
Sun JDK (Windows Production Release) 1.6 _07
Sun JDK (Windows Production Release) 1.6 _06
Sun JDK (Windows Production Release) 1.6 _05
Sun JDK (Windows Production Release) 1.6 _04
Sun JDK (Windows Production Release) 1.6
Sun JDK (Windows Production Release) 1.5 0_10
Sun JDK (Windows Production Release) 1.5 _22
Sun JDK (Windows Production Release) 1.5 _18
Sun JDK (Windows Production Release) 1.5 _17
Sun JDK (Windows Production Release) 1.5 _15
Sun JDK (Windows Production Release) 1.5 _14
Sun JDK (Windows Production Release) 1.5 _02
Sun JDK (Windows Production Release) 1.5 _01
Sun JDK (Windows Production Release) 1.5 .0_05
Sun JDK (Windows Production Release) 1.5 .0_04
Sun JDK (Windows Production Release) 1.5 .0_03
Sun JDK (Windows Production Release) 1.6.0_23
Sun JDK (Windows Production Release) 1.6.0_21
Sun JDK (Windows Production Release) 1.6.0_20
Sun JDK (Windows Production Release) 1.6.0_19
Sun JDK (Windows Production Release) 1.6.0_18
Sun JDK (Windows Production Release) 1.6.0_15
Sun JDK (Windows Production Release) 1.6.0_03
Sun JDK (Windows Production Release) 1.6.0_02
Sun JDK (Windows Production Release) 1.6.0_01-b06
Sun JDK (Windows Production Release) 1.6.0_01
Sun JDK (Windows Production Release) 1.5.0_25
Sun JDK (Windows Production Release) 1.5.0_24
Sun JDK (Windows Production Release) 1.5.0_23
Sun JDK (Windows Production Release) 1.5.0_20
Sun JDK (Windows Production Release) 1.5.0_16
Sun JDK (Windows Production Release) 1.5.0_13
Sun JDK (Windows Production Release) 1.5.0_12
Sun JDK (Windows Production Release) 1.5.0_11-b03
Sun JDK (Windows Production Release) 1.5.0_07-b03
Sun JDK (Windows Production Release) 1.5.0.0_12
Sun JDK (Windows Production Release) 1.5.0.0_11
Sun JDK (Windows Production Release) 1.5.0.0_09
Sun JDK (Windows Production Release) 1.5.0.0_08
Sun JDK (Windows Production Release) 1.5.0.0_06
Sun JDK (Solaris Production Release) 1.6 _17
Sun JDK (Solaris Production Release) 1.6 _14
Sun JDK (Solaris Production Release) 1.6 _13
Sun JDK (Solaris Production Release) 1.6 _11
Sun JDK (Solaris Production Release) 1.6 _10
Sun JDK (Solaris Production Release) 1.6 _07
Sun JDK (Solaris Production Release) 1.6 _06
Sun JDK (Solaris Production Release) 1.6 _05
Sun JDK (Solaris Production Release) 1.6 _04
Sun JDK (Solaris Production Release) 1.6 _01-b06
Sun JDK (Solaris Production Release) 1.6
Sun JDK (Solaris Production Release) 1.5 0_10
Sun JDK (Solaris Production Release) 1.5 0_09
Sun JDK (Solaris Production Release) 1.5 0_03
Sun JDK (Solaris Production Release) 1.5 _22
Sun JDK (Solaris Production Release) 1.5 _18
Sun JDK (Solaris Production Release) 1.5 _17
Sun JDK (Solaris Production Release) 1.5 _15
Sun JDK (Solaris Production Release) 1.5 _14
Sun JDK (Solaris Production Release) 1.5 _11-b03
Sun JDK (Solaris Production Release) 1.5 _07-b03
Sun JDK (Solaris Production Release) 1.5 _06
Sun JDK (Solaris Production Release) 1.5 _02
Sun JDK (Solaris Production Release) 1.5 _01
Sun JDK (Solaris Production Release) 1.5 .0_05
Sun JDK (Solaris Production Release) 1.5 .0_04
Sun JDK (Solaris Production Release) 1.5 .0_03
Sun JDK (Solaris Production Release) 1.6.0_23
Sun JDK (Solaris Production Release) 1.6.0_21
Sun JDK (Solaris Production Release) 1.6.0_20
Sun JDK (Solaris Production Release) 1.6.0_19
Sun JDK (Solaris Production Release) 1.6.0_18
Sun JDK (Solaris Production Release) 1.6.0_15
Sun JDK (Solaris Production Release) 1.6.0_03
Sun JDK (Solaris Production Release) 1.6.0_02
Sun JDK (Solaris Production Release) 1.6.0_01
Sun JDK (Solaris Production Release) 1.5.0_25
Sun JDK (Solaris Production Release) 1.5.0_24
Sun JDK (Solaris Production Release) 1.5.0_23
Sun JDK (Solaris Production Release) 1.5.0_20
Sun JDK (Solaris Production Release) 1.5.0_16
Sun JDK (Solaris Production Release) 1.5.0_13
Sun JDK (Solaris Production Release) 1.5.0_12
Sun JDK (Solaris Production Release) 1.5.0_11
Sun JDK (Linux Production Release) 1.6 _17
Sun JDK (Linux Production Release) 1.6 _14
Sun JDK (Linux Production Release) 1.6 _13
Sun JDK (Linux Production Release) 1.6 _11
Sun JDK (Linux Production Release) 1.6 _10
Sun JDK (Linux Production Release) 1.6 _07
Sun JDK (Linux Production Release) 1.6 _06
Sun JDK (Linux Production Release) 1.6 _05
Sun JDK (Linux Production Release) 1.6 _04
Sun JDK (Linux Production Release) 1.6 _01-b06
Sun JDK (Linux Production Release) 1.6 _01
Sun JDK (Linux Production Release) 1.6
Sun JDK (Linux Production Release) 1.5 0_10
Sun JDK (Linux Production Release) 1.5 _22
Sun JDK (Linux Production Release) 1.5 _18
Sun JDK (Linux Production Release) 1.5 _17
Sun JDK (Linux Production Release) 1.5 _15
Sun JDK (Linux Production Release) 1.5 _14
Sun JDK (Linux Production Release) 1.5 _11-b03
Sun JDK (Linux Production Release) 1.5 _07-b03
Sun JDK (Linux Production Release) 1.5 _07
Sun JDK (Linux Production Release) 1.5 _06
Sun JDK (Linux Production Release) 1.5 _02
Sun JDK (Linux Production Release) 1.5 _01
Sun JDK (Linux Production Release) 1.5 .0_05
Sun JDK (Linux Production Release) 1.5
Sun JDK (Linux Production Release) 1.6.0_21
Sun JDK (Linux Production Release) 1.6.0_20
Sun JDK (Linux Production Release) 1.6.0_19
Sun JDK (Linux Production Release) 1.6.0_18
Sun JDK (Linux Production Release) 1.6.0_15
Sun JDK (Linux Production Release) 1.6.0_03
Sun JDK (Linux Production Release) 1.6.0_02
Sun JDK (Linux Production Release) 1.5.0_25
Sun JDK (Linux Production Release) 1.5.0_24
Sun JDK (Linux Production Release) 1.5.0_23
Sun JDK (Linux Production Release) 1.5.0_20
Sun JDK (Linux Production Release) 1.5.0_16
Sun JDK (Linux Production Release) 1.5.0_13
Sun JDK (Linux Production Release) 1.5.0.0_12
Sun JDK (Linux Production Release) 1.5.0.0_11
Sun JDK (Linux Production Release) 1.5.0.0_09
Sun JDK (Linux Production Release) 1.5.0.0_08
Sun JDK (Linux Production Release) 1.5.0.0_04
Sun JDK (Linux Production Release) 1.5.0.0_03
S.u.S.E. openSUSE 11.2
S.u.S.E. openSUSE 11.1
RedHat Enterprise Linux WS Extras 4
RedHat Enterprise Linux WS Extras 3
RedHat Enterprise Linux Extras 4.8.z
RedHat Enterprise Linux Extras 4
RedHat Enterprise Linux Extras 3
RedHat Enterprise Linux ES Extras 4
RedHat Enterprise Linux ES Extras 3
RedHat Enterprise Linux AS Extras 4
RedHat Enterprise Linux AS Extras 3
RedHat Desktop Extras 4
RedHat Desktop Extras 3
Red Hat Enterprise Linux Workstation Supplementary 6
Red Hat Enterprise Linux Workstation Optional 6
Red Hat Enterprise Linux Workstation 6
Red Hat Enterprise Linux Supplementary 5 server
Red Hat Enterprise Linux Server Supplementary 6
Red Hat Enterprise Linux Server Optional 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux HPC Node Supplementary 6
Red Hat Enterprise Linux HPC Node Optional 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Desktop Supplementary 6
Red Hat Enterprise Linux Desktop Supplementary 5 client
Red Hat Enterprise Linux Desktop Optional 6
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux Desktop 5 client
Red Hat Enterprise Linux 5 Server
Oracle JRockit R28.0.1
Oracle JRockit R28.0.0
Oracle JRockit R27.6.7
Oracle JRockit R27.6.6
Oracle JRockit R27.6.5
Oracle JRockit R27.6.4
Oracle JRockit R27.6.3
Oracle JRockit R27.6.2
Oracle JRockit R27.6.0-50 1.5.0 15
Oracle JRockit R27.6.0
Oracle JRockit R27.1.0
HP HP-UX B.11.31
HP HP-UX B.11.31
HP HP-UX B.11.23
HP HP-UX B.11.23
HP HP-UX B.11.11
HP HP-UX B.11.11
Avaya Proactive Contact 3.0.3
Avaya Proactive Contact 3.0.2
Avaya Proactive Contact 3.0
Avaya Aura System Platform 6.0
Avaya Aura System Platform 1.1
Avaya Aura Conferencing 6.0 Standard
Not Vulnerable:

Discussion

Oracle Java 'JFileChooser' Security Bypass Vulnerability

Oracle Java is prone to a security-bypass vulnerability.

An attacker can exploit this issue to cause unauthorized users to overwrite and rename arbitrary files on the affected computer. This may lead to further attacks.

Exploit / POC

Oracle Java 'JFileChooser' Security Bypass Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user into visiting a malicious webpage.

Solution / Fix

Oracle Java 'JFileChooser' Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more details.

References

Oracle Java 'JFileChooser' Security Bypass Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report