Oracle Java JRE Insecure Executable Loading Vulnerability
Schweregrad:: Kritisch
Hinweisdatum: 21 Juli 2015
Beschreibung
The vulnerability is caused due to the application loading an executable file in an insecure manner when an out of memory condition occurs. This can be exploited to execute arbitrary programs by tricking a user into e.g. opening a HTML file, which loads an applet located on a remote WebDAV or SMB share.
Trend Micro Lösungen
Apply associated Trend Micro DPI Rules.
Lösungen
Trend Micro Deep Security DPI Rule Number: 1004737
Trend Micro Deep Security DPI Rule Name: 1004737 - Oracle Java JRE Insecure Executable Loading Vulnerability
Betroffene Software und Version:
- Sun Java JRE