Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
BID:50218
Info
Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
| Bugtraq ID: | 50218 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-3544 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2011 12:00AM |
| Updated: | Apr 13 2015 09:22PM |
| Credit: | Michael Schierl |
| Vulnerable: |
Xerox FreeFlow Print Server (FFPS) 73.C0.41 Xerox FreeFlow Print Server (FFPS) 73.B3.61 VMWare VirtualCenter 2.5 VMWare vCenter 5.0 VMWare vCenter 4.1 VMWare vCenter 4.0 VMWare Update Manager 5.0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESX 3.5 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Software Development Kit 11 SP1 for SP2 SuSE SUSE Linux Enterprise Server for VMware 11 SP1 SuSE SUSE Linux Enterprise Server 11 SP1 for SP2 SuSE SUSE Linux Enterprise Server 11 SP1 SuSE SUSE Linux Enterprise Server 10 SP4 SuSE SUSE Linux Enterprise SDK 11 SP1 SuSE SUSE Linux Enterprise Java 11 SP1 SuSE SUSE Linux Enterprise Java 10 SP4 Sun JRE (Windows Production Release) 1.6 _17 Sun JRE (Windows Production Release) 1.6 _13 Sun JRE (Windows Production Release) 1.6 _12 Sun JRE (Windows Production Release) 1.6 _10 Sun JRE (Windows Production Release) 1.6 _07 Sun JRE (Windows Production Release) 1.6 _06 Sun JRE (Windows Production Release) 1.6 _05 Sun JRE (Windows Production Release) 1.6 _04 Sun JRE (Windows Production Release) 1.6 Sun JRE (Windows Production Release) 1.7 Sun JRE (Windows Production Release) 1.6.0_21 Sun JRE (Windows Production Release) 1.6.0_20 Sun JRE (Windows Production Release) 1.6.0_2 Sun JRE (Windows Production Release) 1.6.0_19 Sun JRE (Windows Production Release) 1.6.0_18 Sun JRE (Windows Production Release) 1.6.0_15 Sun JRE (Windows Production Release) 1.6.0_14 Sun JRE (Windows Production Release) 1.6.0_11 Sun JRE (Windows Production Release) 1.6.0_03 Sun JRE (Windows Production Release) 1.6.0_02 Sun JRE (Windows Production Release) 1.6.0_01 Sun JRE (Solaris Production Release) 1.6 _17 Sun JRE (Solaris Production Release) 1.6 _13 Sun JRE (Solaris Production Release) 1.6 _12 Sun JRE (Solaris Production Release) 1.6 _10 Sun JRE (Solaris Production Release) 1.6 _07 Sun JRE (Solaris Production Release) 1.6 _06 Sun JRE (Solaris Production Release) 1.6 _05 Sun JRE (Solaris Production Release) 1.6 _04 Sun JRE (Solaris Production Release) 1.6 Sun JRE (Solaris Production Release) 1.7 Sun JRE (Solaris Production Release) 1.6.0_21 Sun JRE (Solaris Production Release) 1.6.0_2 Sun JRE (Solaris Production Release) 1.6.0_19 Sun JRE (Solaris Production Release) 1.6.0_18 Sun JRE (Solaris Production Release) 1.6.0_15 Sun JRE (Solaris Production Release) 1.6.0_14 Sun JRE (Solaris Production Release) 1.6.0_11 Sun JRE (Solaris Production Release) 1.6.0_03 Sun JRE (Solaris Production Release) 1.6.0_02 Sun JRE (Solaris Production Release) 1.6.0_01 Sun JRE (Linux Production Release) 1.6 _17 Sun JRE (Linux Production Release) 1.6 _13 Sun JRE (Linux Production Release) 1.6 _12 Sun JRE (Linux Production Release) 1.6 _10 Sun JRE (Linux Production Release) 1.6 _07 Sun JRE (Linux Production Release) 1.6 _06 Sun JRE (Linux Production Release) 1.6 _05 Sun JRE (Linux Production Release) 1.6 _04 Sun JRE (Linux Production Release) 1.6 Sun JRE (Linux Production Release) 1.7 Sun JRE (Linux Production Release) 1.6.0_21 Sun JRE (Linux Production Release) 1.6.0_20 Sun JRE (Linux Production Release) 1.6.0_19 Sun JRE (Linux Production Release) 1.6.0_18 Sun JRE (Linux Production Release) 1.6.0_15 Sun JRE (Linux Production Release) 1.6.0_14 Sun JRE (Linux Production Release) 1.6.0_11 Sun JRE (Linux Production Release) 1.6.0_03 Sun JRE (Linux Production Release) 1.6.0_02 Sun JRE (Linux Production Release) 1.6.0_01 Sun JDK (Windows Production Release) 1.6 _17 Sun JDK (Windows Production Release) 1.6 _14 Sun JDK (Windows Production Release) 1.6 _13 Sun JDK (Windows Production Release) 1.6 _11 Sun JDK (Windows Production Release) 1.6 _10 Sun JDK (Windows Production Release) 1.6 _07 Sun JDK (Windows Production Release) 1.6 _06 Sun JDK (Windows Production Release) 1.6 _05 Sun JDK (Windows Production Release) 1.6 _04 Sun JDK (Windows Production Release) 1.6 Sun JDK (Windows Production Release) 1.6.0_21 Sun JDK (Windows Production Release) 1.6.0_20 Sun JDK (Windows Production Release) 1.6.0_19 Sun JDK (Windows Production Release) 1.6.0_18 Sun JDK (Windows Production Release) 1.6.0_15 Sun JDK (Windows Production Release) 1.6.0_03 Sun JDK (Windows Production Release) 1.6.0_02 Sun JDK (Windows Production Release) 1.6.0_01-b06 Sun JDK (Windows Production Release) 1.6.0_01 Sun JDK (Solaris Production Release) 1.6 _17 Sun JDK (Solaris Production Release) 1.6 _14 Sun JDK (Solaris Production Release) 1.6 _13 Sun JDK (Solaris Production Release) 1.6 _11 Sun JDK (Solaris Production Release) 1.6 _10 Sun JDK (Solaris Production Release) 1.6 _07 Sun JDK (Solaris Production Release) 1.6 _06 Sun JDK (Solaris Production Release) 1.6 _05 Sun JDK (Solaris Production Release) 1.6 _04 Sun JDK (Solaris Production Release) 1.6 _01-b06 Sun JDK (Solaris Production Release) 1.6 Sun JDK (Solaris Production Release) 1.6.0_21 Sun JDK (Solaris Production Release) 1.6.0_20 Sun JDK (Solaris Production Release) 1.6.0_19 Sun JDK (Solaris Production Release) 1.6.0_18 Sun JDK (Solaris Production Release) 1.6.0_15 Sun JDK (Solaris Production Release) 1.6.0_03 Sun JDK (Solaris Production Release) 1.6.0_02 Sun JDK (Solaris Production Release) 1.6.0_01 Sun JDK (Linux Production Release) 1.6 _17 Sun JDK (Linux Production Release) 1.6 _14 Sun JDK (Linux Production Release) 1.6 _13 Sun JDK (Linux Production Release) 1.6 _11 Sun JDK (Linux Production Release) 1.6 _10 Sun JDK (Linux Production Release) 1.6 _07 Sun JDK (Linux Production Release) 1.6 _06 Sun JDK (Linux Production Release) 1.6 _05 Sun JDK (Linux Production Release) 1.6 _04 Sun JDK (Linux Production Release) 1.6 _01-b06 Sun JDK (Linux Production Release) 1.6 _01 Sun JDK (Linux Production Release) 1.6 Sun JDK (Linux Production Release) 1.6.0_21 Sun JDK (Linux Production Release) 1.6.0_20 Sun JDK (Linux Production Release) 1.6.0_19 Sun JDK (Linux Production Release) 1.6.0_18 Sun JDK (Linux Production Release) 1.6.0_15 Sun JDK (Linux Production Release) 1.6.0_03 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.6.0 Update 7 Sun JDK (Linux Production Release) 1.6.0 Update 6 Sun JDK (Linux Production Release) 1.6.0 Update 5 Sun JDK (Linux Production Release) 1.6.0 Update 4 Sun JDK (Linux Production Release) 1.6.0 Update 3 Sun JDK (Linux Production Release) 1.6.0 Update 21 Sun JDK (Linux Production Release) 1.6.0 Update 20 Sun JDK (Linux Production Release) 1.6.0 Update 19 Sun JDK (Linux Production Release) 1.6.0 Update 18 Sun JDK (Linux Production Release) 1.6.0 Update 17 Sun JDK (Linux Production Release) 1.6.0 Update 16 Sun JDK (Linux Production Release) 1.6.0 Update 15 Sun JDK (Linux Production Release) 1.6.0 Update 14 Sun JDK (Linux Production Release) 1.6.0 Update 13 Sun JDK (Linux Production Release) 1.6.0 Update 12 Sun JDK (Linux Production Release) 1.6.0 Update 11 Sun JDK (Linux Production Release) 1.6.0 Update 10 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Supplementary 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux 5 Server Redhat Desktop Extras 4 Panda Antivirus 1.6.0 Update 7 Panda Antivirus 1.6.0 Update 6 Panda Antivirus 1.6.0 Update 5 Panda Antivirus 1.6.0 Update 4 Panda Antivirus 1.6.0 Update 3 Panda Antivirus 1.6.0 Update 21 Panda Antivirus 1.6.0 Update 20 Panda Antivirus 1.6.0 Update 2 Panda Antivirus 1.6.0 Update 19 Panda Antivirus 1.6.0 Update 18 Panda Antivirus 1.6.0 Update 17 Panda Antivirus 1.6.0 Update 16 Panda Antivirus 1.6.0 Update 15 Panda Antivirus 1.6.0 Update 14 Panda Antivirus 1.6.0 Update 13 Panda Antivirus 1.6.0 Update 12 Panda Antivirus 1.6.0 Update 11 Panda Antivirus 1.6.0 Update 10 Panda Antivirus 1.6.0 Update 1 Oracle JRE (Windows Production Release) 1.6.0_27 Oracle JRE (Windows Production Release) 1.6.0_26 Oracle JRE (Windows Production Release) 1.6.0_25 Oracle JRE (Windows Production Release) 1.6.0_24 Oracle JRE (Windows Production Release) 1.6.0_23 Oracle JRE (Windows Production Release) 1.6.0_22 Oracle JRE (Solaris Production Release) 1.6.0_27 Oracle JRE (Solaris Production Release) 1.6.0_26 Oracle JRE (Solaris Production Release) 1.6.0_25 Oracle JRE (Solaris Production Release) 1.6.0_24 Oracle JRE (Solaris Production Release) 1.6.0_23 Oracle JRE (Solaris Production Release) 1.6.0_22 Oracle JRE (Linux Production Release) 1.6.0_27 Oracle JRE (Linux Production Release) 1.6.0_26 Oracle JRE (Linux Production Release) 1.6.0_25 Oracle JRE (Linux Production Release) 1.6.0_24 Oracle JRE (Linux Production Release) 1.6.0_23 Oracle JRE (Linux Production Release) 1.6.0_22 Oracle JDK (Windows Production Release) 1.7 Oracle JDK (Windows Production Release) 1.6.0_27 Oracle JDK (Windows Production Release) 1.6.0_26 Oracle JDK (Windows Production Release) 1.6.0_25 Oracle JDK (Windows Production Release) 1.6.0_24 Oracle JDK (Windows Production Release) 1.6.0_23 Oracle JDK (Windows Production Release) 1.6.0_22 Oracle JDK (Solaris Production Release) 1.7 Oracle JDK (Solaris Production Release) 1.6.0_27 Oracle JDK (Solaris Production Release) 1.6.0_26 Oracle JDK (Solaris Production Release) 1.6.0_25 Oracle JDK (Solaris Production Release) 1.6.0_24 Oracle JDK (Solaris Production Release) 1.6.0_23 Oracle JDK (Solaris Production Release) 1.6.0_22 Oracle JDK (Linux Production Release) 1.7 Oracle JDK (Linux Production Release) 1.6.0_27 Oracle JDK (Linux Production Release) 1.6.0_26 Oracle JDK (Linux Production Release) 1.6.0_25 Oracle JDK (Linux Production Release) 1.6.0_24 Oracle JDK (Linux Production Release) 1.6.0_23 Oracle JDK (Linux Production Release) 1.6.0_22 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 OpenJDK OpenJDK 1.6 OpenJDK OpenJDK 6 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 IBM Rational Policy Tester 8.5.0.1 IBM Rational Policy Tester 8.5 IBM Rational Policy Tester 8.0 IBM Rational AppScan Standard 8.5.0.1 IBM Rational AppScan Standard 8.0.0.3 IBM Rational AppScan Standard 8.0.0 IBM Rational AppScan Standard 7.8 IBM Rational AppScan Enterprise 8.6 IBM Rational AppScan Enterprise 8.5.0.1 IBM Rational AppScan Enterprise 8.0.1.1 IBM Rational AppScan Enterprise 8.0.1 IBM Rational AppScan Enterprise 8.0.0.1 IBM Rational AppScan Enterprise 8.0.0 IBM Java SE 7.0 IBM Java SE 7 IBM Java SE 6.0.0 SR9-FP2 IBM Java SE 6.0.0 SR9 IBM Java SE 6.0 SR7 IBM Java SE 6.0 SR6 IBM Java SE 6.0 SR5 IBM Java SE 6.0 IBM Java SE 6 SR8 FP1 IBM Java SE 6 HP NonStop Server J6.0.14.01 HP NonStop Server J06.16 HP NonStop Server J06.15.01 HP NonStop Server J06.15 HP NonStop Server J06.14.02 HP NonStop Server J06.14 HP NonStop Server J06.13.01 HP NonStop Server J06.13 HP NonStop Server J06.12.00 HP NonStop Server J06.11.01 HP NonStop Server J06.11.00 HP NonStop Server J06.10.02 HP NonStop Server J06.10.01 HP NonStop Server J06.10.00 HP NonStop Server J06.09.04 HP NonStop Server J06.09.03 HP NonStop Server J06.09.02 HP NonStop Server J06.09.01 HP NonStop Server J06.09.00 HP NonStop Server J06.08.04 HP NonStop Server J06.08.03 HP NonStop Server J06.08.02 HP NonStop Server J06.08.01 HP NonStop Server J06.08.00 HP NonStop Server J06.07.02 HP NonStop Server J06.07.01 HP NonStop Server J06.07.00 HP NonStop Server J06.06.03 HP NonStop Server J06.06.02 HP NonStop Server J06.06.01 HP NonStop Server J06.06.00 HP NonStop Server J06.05.02 HP NonStop Server J06.05.01 HP NonStop Server J06.05.00 HP NonStop Server J06.04.02 HP NonStop Server J06.04.01 HP NonStop Server J06.04.00 HP NonStop Server H06.27 HP NonStop Server H06.26.01 HP NonStop Server H06.26 HP NonStop Server H06.25.01 HP NonStop Server H06.25 HP NonStop Server H06.24.01 HP NonStop Server H06.24 HP NonStop Server H06.23 HP NonStop Server H06.22.01 HP NonStop Server H06.22.00 HP NonStop Server H06.21.02 HP NonStop Server H06.21.01 HP NonStop Server H06.21.00 HP NonStop Server H06.20.03 HP NonStop Server H06.20.02 HP NonStop Server H06.20.01 HP NonStop Server H06.20.00 HP NonStop Server H06.19.03 HP NonStop Server H06.19.02 HP NonStop Server H06.19.01 HP NonStop Server H06.19.00 HP NonStop Server H06.18.02 HP NonStop Server H06.18.01 HP NonStop Server H06.18.00 HP NonStop Server H06.17.03 HP NonStop Server H06.17.02 HP NonStop Server H06.17.01 HP NonStop Server H06.17.00 HP NonStop Server H06.16.02 HP NonStop Server H06.16.01 HP NonStop Server H06.16.00 HP NonStop Server H06.15.02 HP NonStop Server H06.15.01 HP NonStop Server H06.15.00 HP Network Node Manager i 9.1 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avaya Voice Portal 5.1.2 Avaya Voice Portal 5.1.1 Avaya Voice Portal 5.1 SP1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 SP2 Avaya Voice Portal 4.1 SP1 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Proactive Contact 4.1.2 Avaya Proactive Contact 4.1.1 Avaya Proactive Contact 5.0 Avaya Proactive Contact 4.2.2 Avaya Proactive Contact 4.2.1 Avaya Proactive Contact 4.2 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0.1 Avaya Proactive Contact 4.0 Avaya Messaging Storage Server 5.2.8 Avaya Messaging Storage Server 5.2.2 Avaya Messaging Storage Server 5.2 SP3 Avaya Messaging Storage Server 5.2 SP2 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Application Server 5.2 Avaya Message Networking 5.2.1 Avaya Message Networking 5.2.4 Avaya Message Networking 5.2.3 Avaya Message Networking 5.2.2 Avaya Message Networking 5.2 SP1 Avaya Message Networking 5.2 Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.2 SP2 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya IR 4.0 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Application Server 7.0 Avaya IP Office Application Server 6.1 Avaya IP Office Application Server 6.0 Avaya Interactive Response 4.0 Avaya CMS Server 16.2 Avaya CMS Server 16.1 Avaya CMS Server 16.0 Avaya CMS Server 15.0 AUX Avaya CMS Server 15.0 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.0 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura SIP Enablement Services 5.2.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 4.0 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura Communication Manager Utility Services 6.1 Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.1 Avaya Aura Communication Manager 4.0 Avaya Aura Communication Manager 4.0 Avaya Aura Application Server 5300 SIP Core 2.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.7.2 Apple Mac OS X Server 10.7.1 Apple Mac OS X Server 10.7 Apple Mac OS X Server 10.6.8 Apple Mac OS X Server 10.6.7 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.6 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple Mac OS X 10.7 Apple Mac OS X 10.6.8 Apple Mac OS X 10.6.7 Apple Mac OS X 10.6 |
| Not Vulnerable: |
VMWare VirtualCenter 2.5 Update 6b VMWare Update Manager 5.0 Update 1 Oracle JRE (Windows Production Release) 1.6.0_28 Oracle JRE (Solaris Production Release) 1.6.0_28 Oracle JRE (Linux Production Release) 1.6.0_28 Oracle JDK (Windows Production Release) 1.6.0_28 Oracle JDK (Solaris Production Release) 1.6.0_28 Oracle JDK (Linux Production Release) 1.6.0_28 IBM Security AppScan Standard 8.6 IBM Java SE 7 SR1 IBM Java SE 6 SR10 |
Discussion
Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
Oracle Java SE is prone to a remote code-execution vulnerability in Java Runtime Environment.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Scripting' sub-component.
This vulnerability affects the following supported versions:
JDK and JRE 7, 6 Update 27
Oracle Java SE is prone to a remote code-execution vulnerability in Java Runtime Environment.
The vulnerability can be exploited over multiple protocols. This issue affects the 'Scripting' sub-component.
This vulnerability affects the following supported versions:
JDK and JRE 7, 6 Update 27
Exploit / POC
Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This issue is being exploited in the wild through exploit toolkits.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This issue is being exploited in the wild through exploit toolkits.
Solution / Fix
Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
The payloads delivered by the exploit kits are detected by Symantec as 'Trojan.Zbot' and 'Trojan.Horse'.
Apple Mac OS X 10.6.8
Apple Mac OS X 10.6.7
Apple Mac OS X Server 10.7.2
MandrakeSoft Enterprise Server 5
Solution:
Updates are available. Please see the references for more information.
The payloads delivered by the exploit kits are detected by Symantec as 'Trojan.Zbot' and 'Trojan.Horse'.
Apple Mac OS X 10.6.8
-
Apple JavaForMacOSX10.6.dmg
For Mac OS X v10.6 systems
http://www.apple.com/support/downloads/
Apple Mac OS X 10.6.7
-
Apple JavaForMacOSX10.6.dmg
For Mac OS X v10.6 systems
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.7.2
-
Apple JavaForMacOSX10.7.dmg
For Mac OS X v10.7 systems
http://www.apple.com/support/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva icedtea-web-1.0.6-0.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva java-1.6.0-openjdk-1.6.0.0-24.b22.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva java-1.6.0-openjdk-demo-1.6.0.0-24.b22.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva java-1.6.0-openjdk-devel-1.6.0.0-24.b22.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-24.b22.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva java-1.6.0-openjdk-src-1.6.0.0-24.b22.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/
References
Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
References:
References:
- "Private Exploit Pack" - new BEP featuring CVE-2013-1347 (Malware don't need Coffee)
- CVE-2011-3544 / ZDI-11-305 �?? Oracle Java Applet Rhino Script Engine Remote Code (Michael Schierl)
- IBM Java Update Oracle February 14 2012 CPU (IBM)
- Oracle Critical Patch Updates (CPUs) and Synchronized Security Releases (SSRs) (IBM)
- Advisory (ICSA-17-213-02) Schneider Electric Trio TView (CERT)
- ASA-2011-334 java-1.6.0-openjdk security update (RHSA-2011-1380) (Avaya)
- ASA-2011-335 java-1.6.0-sun security update (RHSA-2011-1384) (avaya)
- ASA-2011-364 Oracle Java Critical Update Combined CVEs (October 2011) (Avaya)
- HPSBMU02797 SSRT100867 rev.1 (HP)
- HPSBNS02920 rev.1 - HP NonStop Servers Multiple Remote Vulnerabilities (HP)
- Oracle Java SE Critical Patch Update Advisory - October 2011 (Oracle)
- Security Bulletin: Vulnerabilities in AppScan Enterprise and Policy Tester (IBM)
- Security Bulletin: Vulnerabilities in AppScan Standard (IBM)
- VMSA-2012-0003 VMware VirtualCenter Update and ESX 3.5 patch update JRE (VMware)
- VMSA-2012-0005 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSp (VMware)
- Xerox Security Bulletin XRX12-002 (Xerox)
- ZDI-11-305 Oracle Java Applet Rhino Script Engine Remote Code Execution Vulnerab (Zero Day Initiative)