OSVDB ID: 59711

Title: Sun Java JDK / JRE HsbParser.getSoundBank Function file:// URI Parsing Overflow

Info

Disclosure

Nov 03, 2009

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Oct 30, 2008

Description

Classification

Location: Remote / Network Access, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public, Exploit Commercial
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Oracle (formerly Sun Microsystems) has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1023132
CVE ID: 2009-3867 (see also: NVD) 2010-0079 (see also: NVD)
Bugtraq ID: 36881
Secunia Advisory ID: 37231 37239 37305 37386 37581 37597 37646 37941 37945 38023 38049 38059 38142 38384 38438 38490 45985 49966
Related OSVDB ID: 59705 59707 59708 59709 59710 59712 59713 59714 59715 59716 59717 59718
Metasploit ID: 59711
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0474.html
http://attrition.org/pipermail/vim/2010-January/002315.html
Vendor Specific Advisory URL: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03005726
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405642
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00001.html
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1
http://support.apple.com/kb/HT3969
http://support.apple.com/kb/HT3970
http://www.gentoo.org/security/en/glsa/glsa-200911-02.xml
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2010.html
Generic Exploit URL: http://immunitysec.com
http://www.saintcorporation.com/cgi-bin/exploit_info/jre_hsbparser_getsoundbank
Vendor Specific News/Changelog Entry: http://java.sun.com/javase/6/webnotes/6u17.html
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00004.html
http://lists.vmware.com/pipermail/security-announce/2010/000078.html
https://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01997760
Vendor Specific Solution URL: http://support.apple.com/kb/DL971
http://support.apple.com/kb/DL972
Other Advisory URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2010.html
http://www.vupen.com/english/advisories/2009/3131
http://zerodayinitiative.com/advisories/ZDI-09-076/
News Article: http://www.theregister.co.uk/2009/12/04/mac_windows_java_attack/
RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2009-1560.html
https://rhn.redhat.com/errata/RHSA-2009-1643.html
https://rhn.redhat.com/errata/RHSA-2009-1647.html
https://rhn.redhat.com/errata/RHSA-2010-0043.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/59711