Oracle Java ICC Profile clrt Tag Parsing Remote Code Execution Vulnerability

🗓️ 08 Jun 2011 00:00:00Reported by AnonymousPeter Vreugdenhil, TippingPoint DVLabsType

zdi🔗 www.zerodayinitiative.com👁 33 Views

Oracle Java ICC Profile clrt Tag Parsing Remote Code Execution Vulnerability allows remote code execution on vulnerable Oracle Java Runtime installations via malicious page visit. Vulnerability stems from mishandling of color profiles, leading to integer overflow during memory allocation

Reporter	Title	Published	Views	Family All 173
Tenable Nessus	CentOS 5 : java-1.6.0-openjdk (CESA-2011:0857)	14 Jun 201100:00	–	nessus
Tenable Nessus	Debian DSA-2311-1 : openjdk-6 - several vulnerabilities	28 Sep 201100:00	–	nessus
Tenable Nessus	Debian DSA-2358-1 : openjdk-6 - several vulnerabilities (BEAST)	12 Jan 201200:00	–	nessus
Tenable Nessus	Fedora 14 : java-1.6.0-openjdk-1.6.0.0-53.1.9.8.fc14 (2011-8003)	12 Jun 201100:00	–	nessus
Tenable Nessus	Fedora 13 : java-1.6.0-openjdk-1.6.0.0-51.1.8.8.fc13 (2011-8020)	16 Jun 201100:00	–	nessus
Tenable Nessus	Fedora 15 : java-1.6.0-openjdk-1.6.0.0-58.1.10.2.fc15 (2011-8028)	16 Jun 201100:00	–	nessus
Tenable Nessus	GLSA-201111-02 : Oracle JRE/JDK: Multiple vulnerabilities (BEAST)	7 Nov 201100:00	–	nessus
Tenable Nessus	GLSA-201406-32 : IcedTea JDK: Multiple vulnerabilities (BEAST) (ROBOT)	30 Jun 201400:00	–	nessus
Tenable Nessus	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities	15 Jun 201200:00	–	nessus
Tenable Nessus	Juniper NSM Servers Multiple Java JDK/JRE Vulnerabilities (PSN-2012-08-689)	13 Sep 201300:00	–	nessus

Source	Link
oracle	www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

08 Jun 2011 00:00Current

5.1Medium risk

Vulners AI Score5.1

CVSS 29

EPSS0.12941