This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Java Runtime Environment. Interaction with the JavaFX library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the rendering of HTML in JavaFX. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process.
Oracle Java SE version 6 includes the Oracle Java Runtime Environment andthe Oracle Java Software Development Kit.This update fixes three vulnerabilities in the Oracle Java RuntimeEnvironment and the Oracle Java Software Development Kit. Furtherinformation about these flaws can be found on the Oracle Java SE CriticalPatch Update Advisory page, listed in the References section.(CVE-2013-0169, CVE-2013-1486, CVE-2013-1487)All users of java-1.6.0-sun are advised to upgrade to these updatedpackages, which provide Oracle Java 6 Update 41. All running instances ofOracle Java must be restarted for the update to take effect.
The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment andthe Sun Java 6 Software Development Kit.This update fixes several vulnerabilities in the Sun Java 6 RuntimeEnvironment and the Sun Java 6 Software Development Kit. Furtherinformation about these flaws can be found on the Oracle Java SE CriticalPatch page, listed in the References section. (CVE-2012-0551,CVE-2012-1711, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1718,CVE-2012-1719, CVE-2012-1721, CVE-2012-1722, CVE-2012-1723, CVE-2012-1724,CVE-2012-1725)All users of java-1.6.0-sun are advised to upgrade to these updatedpackages, which provide JDK and JRE 6 Update 33 and resolve these issues.All running instances of Sun Java must be restarted for the update to takeeffect.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Java Runtime Environment. Interaction with the JavaFX library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the rendering of HTML in JavaFX. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Java Runtime Environment. Interaction with the JavaFX library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the rendering of HTML in JavaFX. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process.