ZDI-09-043: Apple Java CColorUIResource Pointer Derference Code Execution Vulnerability

ZDI-09-043: Apple Java CColorUIResource Pointer Derference Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-043 June 16, 2009 -- CVE ID: CVE-2009-1719 -- Affected Vendors: Apple -- Affected Products: Apple Java -- TippingPointTM IPS Customer Protection: TippingPoint...

CVE-2009-1719

The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer...

CVE-2009-1719

Apple Java on Mac OS X 10.5 (Aqua Look and Feel) is affected by CVE-2009-1719. The vulnerability lies in the undocumented apple.laf.CColourUIResource(long, int, int, int, int) constructor; when a crafted value is passed as the first argument, it is interpreted as a pointer and can lead to remote ...