Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:DL:JRE-APPLET2CLASS-LD |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Oracle Java Applet2ClassLoader Remote Code Execution |
Release Date |
2011/03/31 |
Update Number |
1892 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Oracle Java Applet2ClassLoader Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Oracle Java Runtime Environment. The vulnerability exists in the "findClass" method of the "Applet2ClassLoader" class. A successful attack can lead to arbitrary code execution.
Extended Description
Oracle Java is prone to a remote code-execution vulnerability in Java Runtime Environment. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. This vulnerability affects the following supported versions: 6 Update 23
Affected Products
- Avaya aura_conferencing 6.0 SP1 Standard
- Avaya aura_conferencing 6.0 Standard
- Gentoo linux
- Hp hp-ux B.11.11
- Hp hp-ux B.11.23
- Hp hp-ux B.11.31
- Hp network_node_manager_i 9.1
- Oracle jrockit R27.1.0
- Oracle jrockit R27.6.0
- Oracle jrockit R27.6.0-50 1.5.0 15
- Oracle jrockit R27.6.2
- Oracle jrockit R27.6.3
- Oracle jrockit R27.6.4
- Oracle jrockit R27.6.5
- Oracle jrockit R27.6.6
- Oracle jrockit R27.6.7
- Oracle jrockit R27.6.8
- Oracle jrockit R28.0.0
- Oracle jrockit R28.0.1
- Oracle jrockit R28.1.1
- Red_hat desktop_extras 4
- Red_hat enterprise_linux_as_extras 4
- Red_hat enterprise_linux_desktop_supplementary 5 Client
- Red_hat enterprise_linux_desktop_supplementary 6
- Red_hat enterprise_linux_es_extras 4
- Red_hat enterprise_linux_extras 4
- Red_hat enterprise_linux_hpc_node_supplementary 6
- Red_hat enterprise_linux_server_supplementary 6
- Red_hat enterprise_linux_supplementary 5 Server
- Red_hat enterprise_linux_workstation_supplementary 6
- Red_hat enterprise_linux_ws_extras 4
- Red_hat network_satellite_server_(for_rhel_5) 5.4
- Sun jdk_(linux_production_release) 1.6.0
- Sun jdk_(linux_production_release) 1.6.0 01
- Sun jdk_(linux_production_release) 1.6.0 01-B06
- Sun jdk_(linux_production_release) 1.6.0 02
- Sun jdk_(linux_production_release) 1.6.0 03
- Sun jdk_(linux_production_release) 1.6.0 04
- Sun jdk_(linux_production_release) 1.6.0 05
- Sun jdk_(linux_production_release) 1.6.0 06
- Sun jdk_(linux_production_release) 1.6.0 07
- Sun jdk_(linux_production_release) 1.6.0 10
- Sun jdk_(linux_production_release) 1.6.0 11
- Sun jdk_(linux_production_release) 1.6.0 13
- Sun jdk_(linux_production_release) 1.6.0 14
- Sun jdk_(linux_production_release) 1.6.0 15
- Sun jdk_(linux_production_release) 1.6.0 17
- Sun jdk_(linux_production_release) 1.6.0 18
- Sun jdk_(linux_production_release) 1.6.0 19
- Sun jdk_(linux_production_release) 1.6.0 20
- Sun jdk_(linux_production_release) 1.6.0_21
- Sun jdk_(linux_production_release) 1.6.0_22
- Sun jdk_(linux_production_release) 1.6.0_23
- Sun jdk_(solaris_production_release) 1.6.0
- Sun jdk_(solaris_production_release) 1.6.0 01
- Sun jdk_(solaris_production_release) 1.6.0 01-B06
- Sun jdk_(solaris_production_release) 1.6.0 02
- Sun jdk_(solaris_production_release) 1.6.0 03
- Sun jdk_(solaris_production_release) 1.6.0 04
- Sun jdk_(solaris_production_release) 1.6.0 05
- Sun jdk_(solaris_production_release) 1.6.0 06
- Sun jdk_(solaris_production_release) 1.6.0 07
- Sun jdk_(solaris_production_release) 1.6.0 10
- Sun jdk_(solaris_production_release) 1.6.0 11
- Sun jdk_(solaris_production_release) 1.6.0 13
- Sun jdk_(solaris_production_release) 1.6.0 14
- Sun jdk_(solaris_production_release) 1.6.0 15
- Sun jdk_(solaris_production_release) 1.6.0 17
- Sun jdk_(solaris_production_release) 1.6.0 18
- Sun jdk_(solaris_production_release) 1.6.0 19
- Sun jdk_(solaris_production_release) 1.6.0 20
- Sun jdk_(solaris_production_release) 1.6.0_21
- Sun jdk_(solaris_production_release) 1.6.0_22
- Sun jdk_(solaris_production_release) 1.6.0_23
- Sun jdk_(windows_production_release) 1.6.0
- Sun jdk_(windows_production_release) 1.6.0 01
- Sun jdk_(windows_production_release) 1.6.0 01-B06
- Sun jdk_(windows_production_release) 1.6.0 02
- Sun jdk_(windows_production_release) 1.6.0 03
- Sun jdk_(windows_production_release) 1.6.0 04
- Sun jdk_(windows_production_release) 1.6.0 05
- Sun jdk_(windows_production_release) 1.6.0 06
- Sun jdk_(windows_production_release) 1.6.0 07
- Sun jdk_(windows_production_release) 1.6.0 10
- Sun jdk_(windows_production_release) 1.6.0 11
- Sun jdk_(windows_production_release) 1.6.0 13
- Sun jdk_(windows_production_release) 1.6.0 14
- Sun jdk_(windows_production_release) 1.6.0 15
- Sun jdk_(windows_production_release) 1.6.0 17
- Sun jdk_(windows_production_release) 1.6.0 18
- Sun jdk_(windows_production_release) 1.6.0 19
- Sun jdk_(windows_production_release) 1.6.0 20
- Sun jdk_(windows_production_release) 1.6.0_21
- Sun jdk_(windows_production_release) 1.6.0_22
- Sun jdk_(windows_production_release) 1.6.0_23
- Sun jre_(linux_production_release) 1.6.0
- Sun jre_(linux_production_release) 1.6.0 01
- Sun jre_(linux_production_release) 1.6.0 02
- Sun jre_(linux_production_release) 1.6.0 03
- Sun jre_(linux_production_release) 1.6.0 04
- Sun jre_(linux_production_release) 1.6.0 05
- Sun jre_(linux_production_release) 1.6.0 06
- Sun jre_(linux_production_release) 1.6.0 07
- Sun jre_(linux_production_release) 1.6.0 10
- Sun jre_(linux_production_release) 1.6.0 11
- Sun jre_(linux_production_release) 1.6.0 12
- Sun jre_(linux_production_release) 1.6.0 13
- Sun jre_(linux_production_release) 1.6.0 14
- Sun jre_(linux_production_release) 1.6.0 15
- Sun jre_(linux_production_release) 1.6.0 17
- Sun jre_(linux_production_release) 1.6.0 18
- Sun jre_(linux_production_release) 1.6.0 19
- Sun jre_(linux_production_release) 1.6.0 20
- Sun jre_(linux_production_release) 1.6.0_21
- Sun jre_(linux_production_release) 1.6.0_22
- Sun jre_(linux_production_release) 1.6.0_23
- Sun jre_(solaris_production_release) 1.6.0
- Sun jre_(solaris_production_release) 1.6.0 01
- Sun jre_(solaris_production_release) 1.6.0 02
- Sun jre_(solaris_production_release) 1.6.0 03
- Sun jre_(solaris_production_release) 1.6.0 04
- Sun jre_(solaris_production_release) 1.6.0 05
- Sun jre_(solaris_production_release) 1.6.0 06
- Sun jre_(solaris_production_release) 1.6.0 07
- Sun jre_(solaris_production_release) 1.6.0 10
- Sun jre_(solaris_production_release) 1.6.0 11
- Sun jre_(solaris_production_release) 1.6.0 12
- Sun jre_(solaris_production_release) 1.6.0 13
- Sun jre_(solaris_production_release) 1.6.0 14
- Sun jre_(solaris_production_release) 1.6.0 15
- Sun jre_(solaris_production_release) 1.6.0 17
- Sun jre_(solaris_production_release) 1.6.0 18
- Sun jre_(solaris_production_release) 1.6.0 19
- Sun jre_(solaris_production_release) 1.6.0 2
- Sun jre_(solaris_production_release) 1.6.0_21
- Sun jre_(solaris_production_release) 1.6.0_22
- Sun jre_(solaris_production_release) 1.6.0_23
- Sun jre_(windows_production_release) 1.6.0
- Sun jre_(windows_production_release) 1.6.0 01
- Sun jre_(windows_production_release) 1.6.0 02
- Sun jre_(windows_production_release) 1.6.0 03
- Sun jre_(windows_production_release) 1.6.0 04
- Sun jre_(windows_production_release) 1.6.0 05
- Sun jre_(windows_production_release) 1.6.0 06
- Sun jre_(windows_production_release) 1.6.0 07
- Sun jre_(windows_production_release) 1.6.0 10
- Sun jre_(windows_production_release) 1.6.0 11
- Sun jre_(windows_production_release) 1.6.0 12
- Sun jre_(windows_production_release) 1.6.0 13
- Sun jre_(windows_production_release) 1.6.0 14
- Sun jre_(windows_production_release) 1.6.0 15
- Sun jre_(windows_production_release) 1.6.0 17
- Sun jre_(windows_production_release) 1.6.0 18
- Sun jre_(windows_production_release) 1.6.0 19
- Sun jre_(windows_production_release) 1.6.0 2
- Sun jre_(windows_production_release) 1.6.0 20
- Sun jre_(windows_production_release) 1.6.0_21
- Sun jre_(windows_production_release) 1.6.0_22
- Sun jre_(windows_production_release) 1.6.0_23
- Suse novell_linux_pos 9
- Suse open-enterprise-server
- Suse opensuse 11.2
- Suse opensuse 11.3
- Suse suse_linux_enterprise_desktop 10 SP3
- Suse suse_linux_enterprise_desktop 11 SP1
- Suse suse_linux_enterprise_sdk 10 SP3
- Suse suse_linux_enterprise_sdk 11 SP1
- Suse suse_linux_enterprise_server 10 SP3
- Suse suse_linux_enterprise_server 11 SP1
- Suse suse_linux_enterprise_server 9
- Vmware esx 4.1
- Vmware esx 4.1 Update 1
- Vmware vcenter 4.1
- Vmware vcenter 4.1 Update 1
References
- BugTraq: 46388
- CVE: CVE-2010-4452