A memory corruption flaw exists in Oracle Java SE and Java for Business. The 'HeadspaceSoundbank.nGetName' function fails to sanitize user-supplied input when parsing BANK records in SoundBank files, resulting in memory corruption. With a specially crafted BANK record, a context-dependent attacker can execute arbitrary code.

Currently, there are no known workarounds or upgrades to correct this issue. However, Sun has released a patch to address this vulnerability.

• Related OSVDB ID: 69033 69034 69035 69036 69037 69038 69039 69040 69041 69042 69043 69044 69045 69046 69048 69049 69050 69051 69052 69053 69054 69055 69056 69057 69058 69059
• CVE ID: 2010-3559 (see also: NVD)
• Secunia Advisory ID: 41791 41958 41967 42560 42974 43091 43309 46529 46651 46728 49966
• Vendor Specific Advisory URL: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405642
  http://www.vmware.com/security/advisories/VMSA-2011-0003.html
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
  http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html
  http://lists.vmware.com/pipermail/security-announce/2011/000149.html
  http://support.avaya.com/css/P8/documents/100114315
  http://www.gentoo.org/security/en/glsa/glsa-201111-02.xml
  http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
  http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02616748
• Other Advisory URL: http://www.zerodayinitiative.com/advisories/ZDI-10-208/
• RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2010-0807.html
  RHSA-2010:0770

• Anonymous - Zero Day Initiative (ZDI)