----------------------------------------------------------------------

Want a new IT Security job?

Vacant positions at Secunia:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Java Web Start JNLP File Command Line Argument Injection
Vulnerability

SECUNIA ADVISORY ID:
SA14640

VERIFY ADVISORY:
http://secunia.com/advisories/14640/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Java Web Start 1.x
http://secunia.com/product/1005/
Sun Java JRE 1.4.x
http://secunia.com/product/784/
Sun Java SDK 1.4.x
http://secunia.com/product/1661/

DESCRIPTION:
Jouko Pynnönen has reported a vulnerability in Java Web Start, which
can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an input validation error when
handling property tags in JNLP files. This can be exploited to pass
arbitrary command line arguments to the virtual machine by tricking a
user into opening a malicious JNLP file.

Successful exploitation can lead to the Java "sandbox" being
disabled.

NOTE: JNLP files are opened automatically in Microsoft Internet
Explorer.

The vulnerability affects Java Web Start included in J2SE releases
1.4.2 through 1.4.2_06 for Windows, Solaris and Linux.

SOLUTION:
The vulnerability has been fixed in J2SE releases 1.4.2_07 or later
for Windows, Solaris and Linux.

PROVIDED AND/OR DISCOVERED BY:
Jouko Pynnönen

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57740-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------