Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

 HTTP:STC:JAVA:JAVA-VM-ARGS-OF

Severity

 High

Recommended

 No

Recommended Action

 Drop

Category

 HTTP

Keywords

 Sun Java JNLP java-vm-args Attribute Overflow

Release Date

 2008/07/29

Update Number

 1225

Supported Platforms

 idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: Sun Java JNLP java-vm-args Attribute Overflow


This signature detects attempts to exploit a known vulnerability in the Java JRE implementation. Attackers can create a malicious JNLP file that, when loaded by a user, can compromise the user's computer.

Extended Description

Sun Java Web Start is prone to multiple vulnerabilities, including buffer-overflow, privilege-escalation, and information-disclosure issues. Successful exploits may allow attackers to execute arbitrary code, obtain information, or read, write, and execute arbitrary local files in the context of the user running a malicious Web Start application. This may result in a compromise of the underlying system. This issue affects the following versions: JDK and JRE 6 Update 6 and earlier JDK and JRE 5.0 Update 15 and earlier SDK and JRE 1.4.2_17 and earlier

Affected Products

  • Apple Mac OS X 10.4.0
  • Apple Mac OS X 10.4.1
  • Apple Mac OS X 10.4.10
  • Apple Mac OS X 10.4.11
  • Apple Mac OS X 10.4.2
  • Apple Mac OS X 10.4.3
  • Apple Mac OS X 10.4.4
  • Apple Mac OS X 10.4.5
  • Apple Mac OS X 10.4.6
  • Apple Mac OS X 10.4.7
  • Apple Mac OS X 10.4.8
  • Apple Mac OS X 10.4.9
  • Apple Mac OS X 10.5
  • Apple Mac OS X 10.5.1
  • Apple Mac OS X 10.5.2
  • Apple Mac OS X 10.5.3
  • Apple Mac OS X 10.5.4
  • Apple Mac OS X 10.5.5
  • Apple Mac OS X Server 10.4.0
  • Apple Mac OS X Server 10.4.1
  • Apple Mac OS X Server 10.4.10
  • Apple Mac OS X Server 10.4.11
  • Apple Mac OS X Server 10.4.2
  • Apple Mac OS X Server 10.4.3
  • Apple Mac OS X Server 10.4.4
  • Apple Mac OS X Server 10.4.5
  • Apple Mac OS X Server 10.4.6
  • Apple Mac OS X Server 10.4.7
  • Apple Mac OS X Server 10.4.8
  • Apple Mac OS X Server 10.4.9
  • Apple Mac OS X Server 10.5
  • Apple Mac OS X Server 10.5.1
  • Apple Mac OS X Server 10.5.2
  • Apple Mac OS X Server 10.5.3
  • Apple Mac OS X Server 10.5.4
  • Apple Mac OS X Server 10.5.5
  • Avaya Interactive Response 2.0
  • Avaya Interactive Response 3.0
  • Gentoo Linux
  • Nortel Networks Enterprise VoIP TM-CS1000
  • Nortel Networks MPS 1.0
  • Nortel Networks MPS 2.1
  • Nortel Networks MPS 3.0
  • Nortel Networks MPS Developer
  • Nortel Networks MPS Manager
  • Nortel Networks MPS Speech Server 6.0
  • Nortel Networks Self-Service CCXML
  • Nortel Networks Self-Service MPS 1000
  • Nortel Networks Self-Service MPS 500
  • Nortel Networks Self-Service Peri CTX
  • Nortel Networks Self Service VoiceXML
  • Red Hat Desktop Extras 3
  • Red Hat Desktop Extras 4
  • Red Hat Enterprise Linux AS Extras 3
  • Red Hat Enterprise Linux AS Extras 4
  • Red Hat Enterprise Linux Desktop Supplementary 5 Client
  • Red Hat Enterprise Linux ES Extras 3
  • Red Hat Enterprise Linux ES Extras 4
  • Red Hat Enterprise Linux Extras 4
  • Red Hat Enterprise Linux Supplementary 5 Server
  • Red Hat Enterprise Linux WS Extras 3
  • Red Hat Enterprise Linux WS Extras 4
  • Red Hat Red Hat Network Satellite (for RHEL 4) 5.1
  • Sun JDK (Linux Production Release) 1.5.0.0 03
  • Sun JDK (Linux Production Release) 1.5.0.0 04
  • Sun JDK (Linux Production Release) 1.5.0 .0 05
  • Sun JDK (Linux Production Release) 1.5.0.0 08
  • Sun JDK (Linux Production Release) 1.5.0.0 09
  • Sun JDK (Linux Production Release) 1.5.0 01
  • Sun JDK (Linux Production Release) 1.5.0 0 10
  • Sun JDK (Linux Production Release) 1.5.0.0 11
  • Sun JDK (Linux Production Release) 1.5.0.0 12
  • Sun JDK (Linux Production Release) 1.5.0 02
  • Sun JDK (Linux Production Release) 1.5.0 06
  • Sun JDK (Linux Production Release) 1.5.0 07
  • Sun JDK (Linux Production Release) 1.5.0 13
  • Sun JDK (Linux Production Release) 1.5.0 14
  • Sun JDK (Linux Production Release) 1.5.0 15
  • Sun JDK (Linux Production Release) 1.6.0
  • Sun JDK (Linux Production Release) 1.6.0 01
  • Sun JDK (Linux Production Release) 1.6.0 02
  • Sun JDK (Linux Production Release) 1.6.0 03
  • Sun JDK (Linux Production Release) 1.6.0 04
  • Sun JDK (Linux Production Release) 1.6.0 05
  • Sun JDK (Linux Production Release) 1.6.0 06
  • Sun JDK (Solaris Production Release) 1.5.0 15
  • Sun JRE (Linux Production Release) 1.4.2
  • Sun JRE (Linux Production Release) 1.4.2 01
  • Sun JRE (Linux Production Release) 1.4.2 02
  • Sun JRE (Linux Production Release) 1.4.2 03
  • Sun JRE (Linux Production Release) 1.4.2 04
  • Sun JRE (Linux Production Release) 1.4.2 05
  • Sun JRE (Linux Production Release) 1.4.2 06
  • Sun JRE (Linux Production Release) 1.4.2 07
  • Sun JRE (Linux Production Release) 1.4.2 08
  • Sun JRE (Linux Production Release) 1.4.2 09
  • Sun JRE (Linux Production Release) 1.4.2 10
  • Sun JRE (Linux Production Release) 1.4.2 10-B03
  • Sun JRE (Linux Production Release) 1.4.2 11
  • Sun JRE (Linux Production Release) 1.4.2 12
  • Sun JRE (Linux Production Release) 1.4.2 13
  • Sun JRE (Linux Production Release) 1.4.2 14
  • Sun JRE (Linux Production Release) 1.4.2 15
  • Sun JRE (Linux Production Release) 1.4.2 16
  • Sun JRE (Linux Production Release) 1.4.2 17
  • Sun JRE (Linux Production Release) 1.5.0 06
  • Sun JRE (Linux Production Release) 1.5.0 07
  • Sun JRE (Linux Production Release) 1.5.0 08
  • Sun JRE (Linux Production Release) 1.5.0 09
  • Sun JRE (Linux Production Release) 1.5.0 10
  • Sun JRE (Linux Production Release) 1.5.0 11
  • Sun JRE (Linux Production Release) 1.5.0 12
  • Sun JRE (Linux Production Release) 1.5.0 13
  • Sun JRE (Linux Production Release) 1.5.0 14
  • Sun JRE (Linux Production Release) 1.5.0 15
  • Sun JRE (Linux Production Release) 1.6.0 01
  • Sun JRE (Linux Production Release) 1.6.0 02
  • Sun JRE (Linux Production Release) 1.6.0 03
  • Sun JRE (Linux Production Release) 1.6.0 04
  • Sun JRE (Linux Production Release) 1.6.0 05
  • Sun JRE (Linux Production Release) 1.6.0 06
  • Sun JRE (Solaris Production Release) 1.4.2
  • Sun JRE (Solaris Production Release) 1.4.2 01
  • Sun JRE (Solaris Production Release) 1.4.2 02
  • Sun JRE (Solaris Production Release) 1.4.2 03
  • Sun JRE (Solaris Production Release) 1.4.2 04
  • Sun JRE (Solaris Production Release) 1.4.2 05
  • Sun JRE (Solaris Production Release) 1.4.2 06
  • Sun JRE (Solaris Production Release) 1.4.2 07
  • Sun JRE (Solaris Production Release) 1.4.2 08
  • Sun JRE (Solaris Production Release) 1.4.2 09
  • Sun JRE (Solaris Production Release) 1.4.2 10
  • Sun JRE (Solaris Production Release) 1.4.2 11
  • Sun JRE (Solaris Production Release) 1.4.2 12
  • Sun JRE (Solaris Production Release) 1.4.2 13
  • Sun JRE (Solaris Production Release) 1.4.2 14
  • Sun JRE (Solaris Production Release) 1.4.2 15
  • Sun JRE (Solaris Production Release) 1.4.2 16
  • Sun JRE (Solaris Production Release) 1.4.2 17
  • Sun JRE (Solaris Production Release) 1.5.0 15
  • Sun JRE (Windows Production Release) 1.4.2
  • Sun JRE (Windows Production Release) 1.4.2 01
  • Sun JRE (Windows Production Release) 1.4.2 02
  • Sun JRE (Windows Production Release) 1.4.2 03
  • Sun JRE (Windows Production Release) 1.4.2 04
  • Sun JRE (Windows Production Release) 1.4.2 05
  • Sun JRE (Windows Production Release) 1.4.2 06
  • Sun JRE (Windows Production Release) 1.4.2 07
  • Sun JRE (Windows Production Release) 1.4.2 08
  • Sun JRE (Windows Production Release) 1.4.2 09
  • Sun JRE (Windows Production Release) 1.4.2 10
  • Sun JRE (Windows Production Release) 1.4.2 11
  • Sun JRE (Windows Production Release) 1.4.2 12
  • Sun JRE (Windows Production Release) 1.4.2 13
  • Sun JRE (Windows Production Release) 1.4.2 14
  • Sun JRE (Windows Production Release) 1.4.2 15
  • Sun JRE (Windows Production Release) 1.4.2 16
  • Sun JRE (Windows Production Release) 1.4.2 17
  • Sun SDK (Linux Production Release) 1.4.2
  • Sun SDK (Linux Production Release) 1.4.2 01
  • Sun SDK (Linux Production Release) 1.4.2 02
  • Sun SDK (Linux Production Release) 1.4.2 03
  • Sun SDK (Linux Production Release) 1.4.2 04
  • Sun SDK (Linux Production Release) 1.4.2 05
  • Sun SDK (Linux Production Release) 1.4.2 08
  • Sun SDK (Linux Production Release) 1.4.2 09
  • Sun SDK (Linux Production Release) 1.4.2 10
  • Sun SDK (Linux Production Release) 1.4.2 11
  • Sun SDK (Linux Production Release) 1.4.2 12
  • Sun SDK (Linux Production Release) 1.4.2 13
  • Sun SDK (Linux Production Release) 1.4.2 14
  • Sun SDK (Linux Production Release) 1.4.2 15
  • Sun SDK (Linux Production Release) 1.4.2 16
  • Sun SDK (Linux Production Release) 1.4.2 17
  • Sun SDK (Solaris Production Release) 1.4.2
  • Sun SDK (Solaris Production Release) 1.4.2 03
  • Sun SDK (Solaris Production Release) 1.4.2 04
  • Sun SDK (Solaris Production Release) 1.4.2 05
  • Sun SDK (Solaris Production Release) 1.4.2 08
  • Sun SDK (Solaris Production Release) 1.4.2 09
  • Sun SDK (Solaris Production Release) 1.4.2 10
  • Sun SDK (Solaris Production Release) 1.4.2 11
  • Sun SDK (Solaris Production Release) 1.4.2 12
  • Sun SDK (Solaris Production Release) 1.4.2 13
  • Sun SDK (Solaris Production Release) 1.4.2 14
  • Sun SDK (Solaris Production Release) 1.4.2 15
  • Sun SDK (Solaris Production Release) 1.4.2 16
  • Sun SDK (Solaris Production Release) 1.4.2 17
  • Sun SDK (Windows Production Release) 1.4.2
  • Sun SDK (Windows Production Release) 1.4.2 03
  • Sun SDK (Windows Production Release) 1.4.2 04
  • Sun SDK (Windows Production Release) 1.4.2 05
  • Sun SDK (Windows Production Release) 1.4.2 08
  • Sun SDK (Windows Production Release) 1.4.2 09
  • Sun SDK (Windows Production Release) 1.4.2 10
  • Sun SDK (Windows Production Release) 1.4.2 11
  • Sun SDK (Windows Production Release) 1.4.2 12
  • Sun SDK (Windows Production Release) 1.4.2 13
  • Sun SDK (Windows Production Release) 1.4.2 14
  • Sun SDK (Windows Production Release) 1.4.2 15
  • Sun SDK (Windows Production Release) 1.4.2 16
  • Sun SDK (Windows Production Release) 1.4.2 17
  • SuSE CORE 9
  • SuSE Novell Linux POS 9
  • SuSE Open-Enterprise-Server
  • SuSE SUSE Linux Enterprise 10
  • SuSE SUSE Linux Enterprise Desktop 10 SP1
  • SuSE SUSE Linux Enterprise Desktop 10 SP2
  • SuSE SUSE Linux Enterprise Server 10
  • SuSE SUSE Linux Enterprise Server 10 SP1
  • SuSE SUSE Linux Enterprise Server 10 SP2
  • SuSE SUSE Linux Enterprise Server 9
  • VMWare ESX Server 3.0.1
  • VMWare ESX Server 3.0.2
  • VMWare ESX Server 3.0.3
  • VMWare ESX Server 3.5
  • VMWare VirtualCenter 2.0.2
  • VMWare VirtualCenter 2.0.2 Update 1
  • VMWare VirtualCenter 2.0.2 Update 2
  • VMWare VirtualCenter 2.0.2 Update 3
  • VMWare VirtualCenter 2.0.2 Update 4
  • VMWare VirtualCenter 2.0.2 Update 5
  • VMWare VirtualCenter 2.5
  • VMWare VirtualCenter 2.5 Update 1
  • VMWare VirtualCenter 2.5 Update 2
  • VMWare VirtualCenter 2.5 Update 5

References

  • BugTraq: 30148
  • CVE: CVE-2008-3111
  • URL: http://www.zerodayinitiative.com/advisories/ZDI-08-043
  • URL: http://sunsolve.sun.com/search/document.do?assetkey=1-26-238905-1

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out