----------------------------------------------------------------------

BETA test the new Secunia Personal Software Inspector!

The Secunia PSI detects installed software on your computer and
categorises it as either Insecure, End-of-Life, or Up-To-Date.
Effectively enabling you to focus your attention on software
installations where more secure versions are available from the
vendors.

Download the free PSI BETA from the Secunia website:
https://psi.secunia.com/

----------------------------------------------------------------------

TITLE:
BEA JRockit Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA26631

VERIFY ADVISORY:
http://secunia.com/advisories/26631/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Cross Site Scripting, DoS, System access

WHERE:
>From remote

SOFTWARE:
BEA JRockit 1.x
http://secunia.com/product/13274/

DESCRIPTION:
Some vulnerabilities have been reported in JRockit, which can be
exploited by malicious people to bypass certain security
restrictions, conduct cross-site scripting attacks, to cause a DoS
(Denial of Service), or to compromise a vulnerable system.

1) An integer overflow error within the parser for embedded ICC
profiles of JPG and BMP images can be exploited to cause a DoS or to
potentially execute arbitrary code.

For more information see vulnerability #1 in:
SA25295

2) An error within the BMP file parser can be exploited to cause a
DoS.

For more information see vulnerability #2 in:
SA25295

3) An error when generating HTML documentation pages with JavaDoc can
potentially be exploited to conduct cross-site scripting attacks.

For more information:
SA25769

4) An error exists when processing SSL/TLS handshake requests can be
exploited to cause a DoS.

For more information see vulnerability #1:
SA26015

5) An error within the Java Runtime Environment Applet Class Loader
can be exploited to establish restricted network connections to
certain services running on the local host.

For more information see vulnerability #2:
SA26015

6) An error when processing XSLT stylesheets contained in XSLT
Transforms in XML signatures can be exploited to execute arbitrary
code.

For more information:
SA26031

7) An unspecified error in the parsing of fonts contained in Java
applets can be exploited to read and write local files, or to execute
local applications.

For more information:
SA26402

The vulnerabilities affect BEA JRockit versions R27.3.1 and prior,
and BEA JRockit versions 7.0 SP6 and prior.

SOLUTION:
Apply patches (see vendor advisories for details).

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
4) http://dev2dev.bea.com/pub/advisory/249
1,2,3,5,6,7) http://dev2dev.bea.com/pub/advisory/248

OTHER REFERENCES:
SA25295:
http://secunia.com/advisories/25295/

SA25769
http://secunia.com/advisories/25769/

SA26015
http://secunia.com/advisories/26015/

SA26031
http://secunia.com/advisories/26031/

SA26402
http://secunia.com/advisories/26402/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------