Lucene search
K

4 matches found

myhack58
myhack58
added 2010/03/05 12:0 a.m.18 views

About Java getSoundBank function stack overflow vulnerability-vulnerability warning-the black bar safety net

:: Vulnerability principles Specifically, the error function is a Java Native method for Java. com. sun. media. sound. HeadspaceSoundbank. nOpenResource it. The function in the copy document path did not check string size and directly to the copy, and ultimately lead to a stack overflow: // $$kk:...

7.6AI score
Exploits0
RedHat Linux
RedHat Linux
added 2009/12/23 5:33 p.m.4 views

java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...

9.3CVSS6.4AI score0.89244EPSS
Exploits11References4
Metasploit
Metasploit
added 2009/12/11 9:18 p.m.24 views

Sun Java JRE getSoundbank file:// URI Buffer Overflow

This module exploits a flaw in the getSoundbank function in the Sun JVM. The payload is serialized and passed to the applet via PARAM tags. It must be a native payload. The effected Java versions are JDK and JRE 6 Update 16 and earlier, JDK and JRE 5.0 Update 21 and earlier, SDK and JRE 1.4.223 a...

9.3CVSS0.4AI score0.89244EPSS
Exploits11
RedHat Linux
RedHat Linux
added 2009/12/08 7:9 p.m.0 views

java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...

9.3CVSS6.4AI score0.89244EPSS
Exploits11References4
Rows per page
Query Builder