Microsoft Java Virtual Machine Class Cast Vulnerability
BID:740
Info
Microsoft Java Virtual Machine Class Cast Vulnerability
| Bugtraq ID: | 740 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 22 1999 12:00AM |
| Updated: | Oct 22 1999 12:00AM |
| Credit: | Discovered by Karsten Sohr at the University of Marburg <[email protected]> and posted to Bugtraq on October 13, 1999 by Gary McGraw. |
| Vulnerable: |
Microsoft Virtual Machine 3000 Series Microsoft Virtual Machine 2000 Series |
| Not Vulnerable: |
Microsoft Virtual Machine 3188 |
Discussion
Microsoft Java Virtual Machine Class Cast Vulnerability
The Virtual Machine is a component of various programs and operating systems that handles the execution of Java code. All Microsoft VMs with build numbers between 2000 and 3187 inclusive have been found to contain a weakness whereby a Java applet could take any action on the local machine that the user could take. This is possible because the MS VM allows 'cast', or conversion, operations to be done on classes, which creates the opportunity for a 'public' class to be converted to 'private', thereby increasing the privileges of the code within that class. This action could not be coded in a regular java compiler, but the java binary could be edited spoecifically to cause the cast operation.
The Virtual Machine is a component of various programs and operating systems that handles the execution of Java code. All Microsoft VMs with build numbers between 2000 and 3187 inclusive have been found to contain a weakness whereby a Java applet could take any action on the local machine that the user could take. This is possible because the MS VM allows 'cast', or conversion, operations to be done on classes, which creates the opportunity for a 'public' class to be converted to 'private', thereby increasing the privileges of the code within that class. This action could not be coded in a regular java compiler, but the java binary could be edited spoecifically to cause the cast operation.
Exploit / POC
Microsoft Java Virtual Machine Class Cast Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft Java Virtual Machine Class Cast Vulnerability
Solution:
Microsoft has released a new build that is not subject to this vulnerability, available at:
http://www.microsoft.com/java/vm/dl_vm32.htm
Solution:
Microsoft has released a new build that is not subject to this vulnerability, available at:
http://www.microsoft.com/java/vm/dl_vm32.htm
References
Microsoft Java Virtual Machine Class Cast Vulnerability
References:
References:
- Microsoft Security Bulletin (MS99-045): Frequently Asked Questions (Microsoft)
- Microsoft Virtual Machine (Microsoft)
- News Archives: Another Serious Security Hole Discovered in Microsoft Java (Reliable Software Technologies)