227 matches found
CVE-2007-0014
ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM...
Design/Logic Flaw
ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM...
CVE-2007-0014
The CVE-2007-0014 issue concerns ChainKey Java Code Protection. Affected component: a Java class loader with a modified defineClass method that saves the bytecode to a file before passing it to the JVM, enabling decompilation of Java class files. The vulnerability is described as a local-attack r...
[SECURITY] Fedora Core 6 Update: mono-1.1.17.1-4.fc6
The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...
[Full-disclosure] JBoss jBPM 2.0: Remote code execution and classloader covert channel
Security Advisory: jBPM 2.0 Date: 06/22/05 URL: http://www.illegalaccess.org/java/jbpm.php " JBoss jBPM is a flexible, extensible workflow management system." jbpm.org Problem 1: Remote code execution possible with jBPM . This allows an attacker to trigger an arbitrary executable on the jBPM/ JBo...
CVE-2003-0896
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine JVM in Sun SDK and JRE 1.4.103 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" slash instead of "." dot characters,...
[LSD] Security vulnerability in SUN's Java Virtual Machine implementation
Hello, We have found a security vulnerability in the SUN's implementation of the Java Virtual Machine, which affects the following SDK and JRE releases: - SDK and JRE 1.4.103 and earlier - SDK and JRE 1.3.108 and earlier - SDK and JRE 1.2.2015 and earlier. SUN was informed about this issue on Jun...