Two vulnerabilities reported in Sun Java Development Kit

Filed in archive Security on May 16, 2007

Not one but two vulnerabilities have been reported in Sun Java Development Kit which remote attackers could exploit for taking control of the system or causing a DoS attack. The first of the vulnerability is the result of the integer overflow error in image parser while processing ICC profiles embedded within JPEG images whereas the second one is the result of error in the BMP image parser while processing of malformed files on Unix/Linux systems which could lead to a DoS attack. It is a highly critical vulnerability and can be exploited both locally and remotely.

Sun JDK version 1 x has been affected due to this. The solution for this problem lies in upgradation to JDK version 1.5.0_11-b03 or 1.6.0_01-b06. Click here for the solution.