Oracle Java Runtime Environment Unsigned Java Code Security Bypass Vulnerability

Bugtraq ID:	57563
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 27 2013 12:00AM
Updated:	Jan 27 2013 12:00AM
Credit:	Security Explorations
Vulnerable:
Not Vulnerable:

RETIRED: Oracle Java Runtime Environment Unsigned Java Code Security Bypass Vulnerability

Oracle Java Runtime Environment is prone to a security-bypass vulnerability.

Attackers can exploit this issue to execute unsigned Java code even if the Java Control Panel is set to disallow the execution of unsigned code.

Very limited information is currently available regarding this issue. We will update this BID as more information emerges.

Note: This BID is retired because it is a duplicate of BID 57707 (Oracle Java SE CVE-2013-1489 Unsigned Java Code Security Bypass Vulnerability).

RETIRED: Oracle Java Runtime Environment Unsigned Java Code Security Bypass Vulnerability

The researcher who discovered this issue has created a functional exploit. Otherwise, the exploit is not publicly available.

RETIRED: Oracle Java Runtime Environment Unsigned Java Code Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Java Runtime Environment Unsigned Java Code Security Bypass Vulnerability

References:

• Java Homepage (Sun)