Signature Detail
Short Name |
APP:ORACLE:RHINOSCRIPT-BYPASS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Oracle Java Applet Rhino Script Engine Policy Bypass |
Release Date |
2011/12/09 |
Update Number |
2045 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Oracle Java Applet Rhino Script Engine Policy Bypass
This signature detects attempts to exploit a policy bypass vulnerability in the Oracle Java Rhino Script engine. This issue can be used with a Java Applet to execute Java code outside of the sandbox. The vulnerability is caused by insufficient restrictions of certain instances of the error object. An attacker can exploit this vulnerability by enticing a user with sufficient privileges to open a webpage containing a Java Applet and Javascript code running the Rhino script engine. Successful exploitation can result in the execution of arbitrary Java code with full privileges of the currently logged in user.
Extended Description
Oracle Java SE is prone to a remote code-execution vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'Scripting' sub-component. This vulnerability affects the following supported versions: JDK and JRE 7, 6 Update 27
Affected Products
- Apple Mac Os X 10.6.5
- Apple Mac Os X 10.6.6
- Apple Mac Os X 10.6.7
- Apple Mac Os X 10.6.8
- Apple Mac Os X 10.7
- Apple Mac Os X 10.7.1
- Apple Mac Os X 10.7.2
- Apple Mac OS X 10.6
- Apple Mac OS X 10.6.1
- Apple Mac OS X 10.6.2
- Apple Mac OS X 10.6.3
- Apple Mac OS X 10.6.4
- Apple Mac OS X 10.6.5
- Apple Mac Os X Server 10.6.7
- Apple Mac Os X Server 10.6.8
- Apple Mac Os X Server 10.7
- Apple Mac Os X Server 10.7.1
- Apple Mac Os X Server 10.7.2
- Apple Mac OS X Server 10.6
- Apple Mac OS X Server 10.6.1
- Apple Mac OS X Server 10.6.2
- Apple Mac OS X Server 10.6.3
- Apple Mac OS X Server 10.6.4
- Apple Mac OS X Server 10.6.5
- Apple Mac OS X Server 10.6.5
- Apple Mac OS X Server 10.6.6
- Avaya Aura Application Enablement Services 5.2
- Avaya Aura Application Enablement Services 5.2.1
- Avaya Aura Application Enablement Services 5.2.2
- Avaya Aura Application Enablement Services 5.2.3
- Avaya Aura Application Enablement Services 6.1
- Avaya Aura Application Enablement Services 6.1.1
- Avaya Aura Application Server 5300 SIP Core 2.0
- Avaya Aura Communication Manager 4.0
- Avaya Aura Communication Manager 4.0
- Avaya Aura Communication Manager 5.1
- Avaya Aura Communication Manager 5.2
- Avaya Aura Communication Manager 5.2.1
- Avaya Aura Communication Manager Utility Services 6.0
- Avaya Aura Communication Manager Utility Services 6.1
- Avaya Aura Conferencing 6.0.0 Standard
- Avaya Aura Conferencing 6.0 Standard
- Avaya Aura Experience Portal 6.0
- Avaya Aura Messaging 6.0
- Avaya Aura Messaging 6.0.1
- Avaya Aura Presence Services 6.0
- Avaya Aura Presence Services 6.1
- Avaya Aura Presence Services 6.1.1
- Avaya Aura Session Manager 1.1
- Avaya Aura Session Manager 5.2
- Avaya Aura Session Manager 6.0
- Avaya Aura Session Manager 6.0 SP1
- Avaya Aura Session Manager 6.1
- Avaya Aura Session Manager 6.1.1
- Avaya Aura Session Manager 6.1.2
- Avaya Aura Session Manager 6.1.3
- Avaya Aura Session Manager 6.1 Sp1
- Avaya Aura Session Manager 6.1 SP2
- Avaya Aura SIP Enablement Services 4.0
- Avaya Aura SIP Enablement Services 5.0
- Avaya Aura SIP Enablement Services 5.1
- Avaya Aura SIP Enablement Services 5.2
- Avaya Aura SIP Enablement Services 5.2.1
- Avaya Aura System Manager 6.1
- Avaya Aura System Manager 6.1.1
- Avaya Aura System Manager 6.1.2
- Avaya Aura System Manager 6.1.3
- Avaya Aura System Manager 6.1 Sp1
- Avaya Aura System Manager 6.1 SP2
- Avaya Aura System Platform 1.1
- Avaya Aura System Platform 6.0
- Avaya Aura System Platform 6.0.1
- Avaya Aura System Platform 6.0.2
- Avaya Aura System Platform 6.0 SP2
- Avaya Aura System Platform 6.0 SP3
- Avaya CMS Server 15.0
- Avaya CMS Server 15.0 AUX
- Avaya CMS Server 16.0
- Avaya CMS Server 16.1
- Avaya CMS Server 16.2
- Avaya Interactive Response 4.0
- Avaya IP Office Application Server 6.0
- Avaya IP Office Application Server 6.1
- Avaya IP Office Application Server 7.0
- Avaya IQ 5
- Avaya IQ 5.1
- Avaya IQ 5.1.1
- Avaya IQ 5.2
- Avaya IR 4.0
- Avaya Meeting Exchange 5.0
- Avaya Meeting Exchange 5.0.0.0.52
- Avaya Meeting Exchange 5.0 SP1
- Avaya Meeting Exchange 5.0 SP2
- Avaya Meeting Exchange 5.1
- Avaya Meeting Exchange 5.1 SP1
- Avaya Meeting Exchange 5.2
- Avaya Meeting Exchange 5.2 SP1
- Avaya Meeting Exchange 5.2 SP2
- Avaya Message Networking 5.2
- Avaya Message Networking 5.2.1
- Avaya Message Networking 5.2.2
- Avaya Message Networking 5.2.3
- Avaya Message Networking 5.2.4
- Avaya Message Networking 5.2 SP1
- Avaya Messaging Application Server 5.2
- Avaya Messaging Storage Server 5.2
- Avaya Messaging Storage Server 5.2.2
- Avaya Messaging Storage Server 5.2.8
- Avaya Messaging Storage Server 5.2 SP1
- Avaya Messaging Storage Server 5.2 SP2
- Avaya Messaging Storage Server 5.2 SP3
- Avaya Proactive Contact 4.0
- Avaya Proactive Contact 4.0.1
- Avaya Proactive Contact 4.1
- Avaya Proactive Contact 4.1.1
- Avaya Proactive Contact 4.1.2
- Avaya Proactive Contact 4.2
- Avaya Proactive Contact 4.2.1
- Avaya Proactive Contact 4.2.2
- Avaya Proactive Contact 5.0
- Avaya Voice Portal 4.0
- Avaya Voice Portal 4.1
- Avaya Voice Portal 4.1 SP1
- Avaya Voice Portal 4.1 SP2
- Avaya Voice Portal 5.0
- Avaya Voice Portal 5.0 SP1
- Avaya Voice Portal 5.0 SP2
- Avaya Voice Portal 5.1
- Avaya Voice Portal 5.1
- Avaya Voice Portal 5.1.1
- Avaya Voice Portal 5.1.2
- Avaya Voice Portal 5.1 SP1
- Debian Linux 6.0 amd64
- Debian Linux 6.0 arm
- Debian Linux 6.0 ia-32
- Debian Linux 6.0 ia-64
- Debian Linux 6.0 mips
- Debian Linux 6.0 powerpc
- Debian Linux 6.0 s/390
- Debian Linux 6.0 sparc
- Gentoo Linux
- HP HP-UX B.11.11
- HP HP-UX B.11.23
- HP HP-UX B.11.31
- HP Network Node Manager i 9.1
- IBM Java SE 6
- IBM Java SE 6.0
- IBM Java SE 6.0.0 SR9
- IBM Java SE 6.0.0 SR9-FP2
- IBM Java SE 6.0 SR5
- IBM Java SE 6.0 SR6
- IBM Java SE 6.0 SR7
- IBM Java SE 6 SR8 FP1
- IBM Java SE 7
- IBM Java SE 7.0
- Mandriva Enterprise Server 5
- Mandriva Enterprise Server 5 X86 64
- Mandriva Linux Mandrake 2010.1
- Mandriva Linux Mandrake 2010.1 X86 64
- Mandriva Linux Mandrake 2011
- Mandriva Linux Mandrake 2011 x86_64
- OpenJDK 1.6.0
- OpenJDK 6
- Oracle Enterprise Linux 5
- Oracle Enterprise Linux 6
- Panda Antivirus 1.6.0 Update 1
- Panda Antivirus 1.6.0 Update 10
- Panda Antivirus 1.6.0 Update 11
- Panda Antivirus 1.6.0 Update 12
- Panda Antivirus 1.6.0 Update 13
- Panda Antivirus 1.6.0 Update 14
- Panda Antivirus 1.6.0 Update 15
- Panda Antivirus 1.6.0 Update 16
- Panda Antivirus 1.6.0 Update 17
- Panda Antivirus 1.6.0 Update 18
- Panda Antivirus 1.6.0 Update 19
- Panda Antivirus 1.6.0 Update 2
- Panda Antivirus 1.6.0 Update 20
- Panda Antivirus 1.6.0 Update 21
- Panda Antivirus 1.6.0 Update 3
- Panda Antivirus 1.6.0 Update 4
- Panda Antivirus 1.6.0 Update 5
- Panda Antivirus 1.6.0 Update 6
- Panda Antivirus 1.6.0 Update 7
- Red Hat Desktop Extras 4
- Red Hat Enterprise Linux 5 Server
- Red Hat Enterprise Linux AS Extras 4
- Red Hat Enterprise Linux Desktop 5 Client
- Red Hat Enterprise Linux Desktop 6
- Red Hat Enterprise Linux Desktop Optional 6
- Red Hat Enterprise Linux Desktop Supplementary 5 Client
- Red Hat Enterprise Linux Desktop Supplementary 6
- Red Hat Enterprise Linux ES Extras 4
- Red Hat Enterprise Linux Extras 4
- Red Hat Enterprise Linux HPC Node 6
- Red Hat Enterprise Linux HPC Node Optional 6
- Red Hat Enterprise Linux HPC Node Supplementary 6
- Red Hat Enterprise Linux Server 6
- Red Hat Enterprise Linux Server Optional 6
- Red Hat Enterprise Linux Server Supplementary 6
- Red Hat Enterprise Linux Supplementary 5 Server
- Red Hat Enterprise Linux Workstation 6
- Red Hat Enterprise Linux Workstation Optional 6
- Red Hat Enterprise Linux Workstation Supplementary 6
- Red Hat Enterprise Linux WS Extras 4
- Red Hat Fedora 14
- Red Hat Fedora 15
- Red Hat Fedora 16
- Sun JDK (Linux Production Release) 1.6.0
- Sun JDK (Linux Production Release) 1.6.0 01
- Sun JDK (Linux Production Release) 1.6.0 01-B06
- Sun JDK (Linux Production Release) 1.6.0 02
- Sun JDK (Linux Production Release) 1.6.0 03
- Sun JDK (Linux Production Release) 1.6.0 04
- Sun JDK (Linux Production Release) 1.6.0 05
- Sun JDK (Linux Production Release) 1.6.0 06
- Sun JDK (Linux Production Release) 1.6.0 07
- Sun JDK (Linux Production Release) 1.6.0 10
- Sun JDK (Linux Production Release) 1.6.0 11
- Sun JDK (Linux Production Release) 1.6.0 13
- Sun JDK (Linux Production Release) 1.6.0 14
- Sun JDK (Linux Production Release) 1.6.0 15
- Sun JDK (Linux Production Release) 1.6.0 17
- Sun JDK (Linux Production Release) 1.6.0 18
- Sun JDK (Linux Production Release) 1.6.0 19
- Sun JDK (Linux Production Release) 1.6.0 20
- Sun JDK (Linux Production Release) 1.6.0_21
- Sun JDK (Linux Production Release) 1.6.0_22
- Sun JDK (Linux Production Release) 1.6.0_23
- Sun JDK (Linux Production Release) 1.6.0_24
- Sun JDK (Linux Production Release) 1.6.0_25
- Sun JDK (Linux Production Release) 1.6.0_26
- Sun JDK (Linux Production Release) 1.6.0_27
- Sun JDK (Linux Production Release) 1.6.0 Update 10
- Sun JDK (Linux Production Release) 1.6.0 Update 11
- Sun JDK (Linux Production Release) 1.6.0 Update 12
- Sun JDK (Linux Production Release) 1.6.0 Update 13
- Sun JDK (Linux Production Release) 1.6.0 Update 14
- Sun JDK (Linux Production Release) 1.6.0 Update 15
- Sun JDK (Linux Production Release) 1.6.0 Update 16
- Sun JDK (Linux Production Release) 1.6.0 Update 17
- Sun JDK (Linux Production Release) 1.6.0 Update 18
- Sun JDK (Linux Production Release) 1.6.0 Update 19
- Sun JDK (Linux Production Release) 1.6.0 Update 20
- Sun JDK (Linux Production Release) 1.6.0 Update 21
- Sun JDK (Linux Production Release) 1.6.0 Update 3
- Sun JDK (Linux Production Release) 1.6.0 Update 4
- Sun JDK (Linux Production Release) 1.6.0 Update 5
- Sun JDK (Linux Production Release) 1.6.0 Update 6
- Sun JDK (Linux Production Release) 1.6.0 Update 7
- Sun JDK (Linux Production Release) 1.7.0
- Sun JDK (Solaris Production Release) 1.6.0
- Sun JDK (Solaris Production Release) 1.6.0 01
- Sun JDK (Solaris Production Release) 1.6.0 01-B06
- Sun JDK (Solaris Production Release) 1.6.0 02
- Sun JDK (Solaris Production Release) 1.6.0 03
- Sun JDK (Solaris Production Release) 1.6.0 04
- Sun JDK (Solaris Production Release) 1.6.0 05
- Sun JDK (Solaris Production Release) 1.6.0 06
- Sun JDK (Solaris Production Release) 1.6.0 07
- Sun JDK (Solaris Production Release) 1.6.0 10
- Sun JDK (Solaris Production Release) 1.6.0 11
- Sun JDK (Solaris Production Release) 1.6.0 13
- Sun JDK (Solaris Production Release) 1.6.0 14
- Sun JDK (Solaris Production Release) 1.6.0 15
- Sun JDK (Solaris Production Release) 1.6.0 17
- Sun JDK (Solaris Production Release) 1.6.0 18
- Sun JDK (Solaris Production Release) 1.6.0 19
- Sun JDK (Solaris Production Release) 1.6.0 20
- Sun JDK (Solaris Production Release) 1.6.0_21
- Sun JDK (Solaris Production Release) 1.6.0_22
- Sun JDK (Solaris Production Release) 1.6.0_23
- Sun JDK (Solaris Production Release) 1.6.0_24
- Sun JDK (Solaris Production Release) 1.6.0_25
- Sun JDK (Solaris Production Release) 1.6.0_26
- Sun JDK (Solaris Production Release) 1.6.0_27
- Sun JDK (Solaris Production Release) 1.7.0
- Sun JDK (Windows Production Release) 1.6.0
- Sun JDK (Windows Production Release) 1.6.0 01
- Sun JDK (Windows Production Release) 1.6.0 01-B06
- Sun JDK (Windows Production Release) 1.6.0 02
- Sun JDK (Windows Production Release) 1.6.0 03
- Sun JDK (Windows Production Release) 1.6.0 04
- Sun JDK (Windows Production Release) 1.6.0 05
- Sun JDK (Windows Production Release) 1.6.0 06
- Sun JDK (Windows Production Release) 1.6.0 07
- Sun JDK (Windows Production Release) 1.6.0 10
- Sun JDK (Windows Production Release) 1.6.0 11
- Sun JDK (Windows Production Release) 1.6.0 13
- Sun JDK (Windows Production Release) 1.6.0 14
- Sun JDK (Windows Production Release) 1.6.0 15
- Sun JDK (Windows Production Release) 1.6.0 17
- Sun JDK (Windows Production Release) 1.6.0 18
- Sun JDK (Windows Production Release) 1.6.0 19
- Sun JDK (Windows Production Release) 1.6.0 20
- Sun JDK (Windows Production Release) 1.6.0_21
- Sun JDK (Windows Production Release) 1.6.0_22
- Sun JDK (Windows Production Release) 1.6.0_23
- Sun JDK (Windows Production Release) 1.6.0_24
- Sun JDK (Windows Production Release) 1.6.0_25
- Sun JDK (Windows Production Release) 1.6.0_26
- Sun JDK (Windows Production Release) 1.6.0_27
- Sun JDK (Windows Production Release) 1.7.0
- Sun JRE (Linux Production Release) 1.6.0
- Sun JRE (Linux Production Release) 1.6.0 01
- Sun JRE (Linux Production Release) 1.6.0 02
- Sun JRE (Linux Production Release) 1.6.0 03
- Sun JRE (Linux Production Release) 1.6.0 04
- Sun JRE (Linux Production Release) 1.6.0 05
- Sun JRE (Linux Production Release) 1.6.0 06
- Sun JRE (Linux Production Release) 1.6.0 07
- Sun JRE (Linux Production Release) 1.6.0 10
- Sun JRE (Linux Production Release) 1.6.0 11
- Sun JRE (Linux Production Release) 1.6.0 12
- Sun JRE (Linux Production Release) 1.6.0 13
- Sun JRE (Linux Production Release) 1.6.0 14
- Sun JRE (Linux Production Release) 1.6.0 15
- Sun JRE (Linux Production Release) 1.6.0 17
- Sun JRE (Linux Production Release) 1.6.0 18
- Sun JRE (Linux Production Release) 1.6.0 19
- Sun JRE (Linux Production Release) 1.6.0 20
- Sun JRE (Linux Production Release) 1.6.0_21
- Sun JRE (Linux Production Release) 1.6.0_22
- Sun JRE (Linux Production Release) 1.6.0_23
- Sun JRE (Linux Production Release) 1.6.0_24
- Sun JRE (Linux Production Release) 1.6.0_25
- Sun JRE (Linux Production Release) 1.6.0_26
- Sun JRE (Linux Production Release) 1.6.0_27
- Sun JRE (Linux Production Release) 1.7
- Sun JRE (Solaris Production Release) 1.6.0
- Sun JRE (Solaris Production Release) 1.6.0 01
- Sun JRE (Solaris Production Release) 1.6.0 02
- Sun JRE (Solaris Production Release) 1.6.0 03
- Sun JRE (Solaris Production Release) 1.6.0 04
- Sun JRE (Solaris Production Release) 1.6.0 05
- Sun JRE (Solaris Production Release) 1.6.0 06
- Sun JRE (Solaris Production Release) 1.6.0 07
- Sun JRE (Solaris Production Release) 1.6.0 10
- Sun JRE (Solaris Production Release) 1.6.0 11
- Sun JRE (Solaris Production Release) 1.6.0 12
- Sun JRE (Solaris Production Release) 1.6.0 13
- Sun JRE (Solaris Production Release) 1.6.0 14
- Sun JRE (Solaris Production Release) 1.6.0 15
- Sun JRE (Solaris Production Release) 1.6.0 17
- Sun JRE (Solaris Production Release) 1.6.0 18
- Sun JRE (Solaris Production Release) 1.6.0 19
- Sun JRE (Solaris Production Release) 1.6.0 2
- Sun JRE (Solaris Production Release) 1.6.0_21
- Sun JRE (Solaris Production Release) 1.6.0_22
- Sun JRE (Solaris Production Release) 1.6.0_23
- Sun JRE (Solaris Production Release) 1.6.0_24
- Sun JRE (Solaris Production Release) 1.6.0_25
- Sun JRE (Solaris Production Release) 1.6.0_26
- Sun JRE (Solaris Production Release) 1.6.0_27
- Sun JRE (Solaris Production Release) 1.7
- Sun JRE (Windows Production Release) 1.6.0
- Sun JRE (Windows Production Release) 1.6.0 01
- Sun JRE (Windows Production Release) 1.6.0 02
- Sun JRE (Windows Production Release) 1.6.0 03
- Sun JRE (Windows Production Release) 1.6.0 04
- Sun JRE (Windows Production Release) 1.6.0 05
- Sun JRE (Windows Production Release) 1.6.0 06
- Sun JRE (Windows Production Release) 1.6.0 07
- Sun JRE (Windows Production Release) 1.6.0 10
- Sun JRE (Windows Production Release) 1.6.0 11
- Sun JRE (Windows Production Release) 1.6.0 12
- Sun JRE (Windows Production Release) 1.6.0 13
- Sun JRE (Windows Production Release) 1.6.0 14
- Sun JRE (Windows Production Release) 1.6.0 15
- Sun JRE (Windows Production Release) 1.6.0 17
- Sun JRE (Windows Production Release) 1.6.0 18
- Sun JRE (Windows Production Release) 1.6.0 19
- Sun JRE (Windows Production Release) 1.6.0 2
- Sun JRE (Windows Production Release) 1.6.0 20
- Sun JRE (Windows Production Release) 1.6.0_21
- Sun JRE (Windows Production Release) 1.6.0_22
- Sun JRE (Windows Production Release) 1.6.0_23
- Sun JRE (Windows Production Release) 1.6.0_24
- Sun JRE (Windows Production Release) 1.6.0_25
- Sun JRE (Windows Production Release) 1.6.0_26
- Sun JRE (Windows Production Release) 1.6.0_27
- Sun JRE (Windows Production Release) 1.7
- SuSE SUSE Linux Enterprise Java 10 SP4
- SuSE SUSE Linux Enterprise Java 11 SP1
- SuSE SUSE Linux Enterprise SDK 11 SP1
- SuSE SUSE Linux Enterprise Server 10 SP4
- SuSE SUSE Linux Enterprise Server 11 SP1
- SuSE SUSE Linux Enterprise Server 11 SP1 for SP2
- SuSE SUSE Linux Enterprise Server for VMware 11 SP1
- SuSE SUSE Linux Enterprise Software Development Kit 11 SP1 for SP2
- Ubuntu Ubuntu Linux 10.04 Amd64
- Ubuntu Ubuntu Linux 10.04 ARM
- Ubuntu Ubuntu Linux 10.04 I386
- Ubuntu Ubuntu Linux 10.04 Powerpc
- Ubuntu Ubuntu Linux 10.04 Sparc
- Ubuntu Ubuntu Linux 10.10 amd64
- Ubuntu Ubuntu Linux 10.10 ARM
- Ubuntu Ubuntu Linux 10.10 i386
- Ubuntu Ubuntu Linux 10.10 powerpc
- Ubuntu Ubuntu Linux 11.04 amd64
- Ubuntu Ubuntu Linux 11.04 ARM
- Ubuntu Ubuntu Linux 11.04 i386
- Ubuntu Ubuntu Linux 11.04 powerpc
- Ubuntu Ubuntu Linux 11.10 amd64
- Ubuntu Ubuntu Linux 11.10 i386
- VMWare ESX 3.5
- VMWare ESX 4.0
- VMWare ESX 4.1
- VMWare Update Manager 5.0
- VMWare vCenter 4.0
- VMWare vCenter 4.1
- VMWare vCenter 5.0
- VMWare VirtualCenter 2.5
- Xerox FreeFlow Print Server (FFPS) 73.B3.61
- Xerox FreeFlow Print Server (FFPS) 73.C0.41
References
- BugTraq: 50218
- CVE: CVE-2011-3544