OSVDB ID: 85088

Title: Oracle Java SE / JRE Sandbox Bypass Multiple Method Arbitrary Code Execution

Info

Disclosure
Aug 31, 2012

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Oracle Java SE / JRE contains an multiple flaws that may allow an attacker to bypass sandbox restrictions and execute arbitrary code.

Classification

 Location: Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Workaround
Exploit: Exploit Private
Disclosure: Coordinated Disclosure

Solution

 Currently, there are no known upgrades or patches to correct this vulnerability. It is possible to temporarily work around the flaw by implementing the following workaround: Disable Java, at least in your web browser, to significantly reduce the chance of attack.

Products

Oracle Corporation

Java SE

 7 Update 7

Java JRE

 7 Update 7

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/85088