TT 脆弱性 Blog

脆弱性情報の記録

Java7の脆弱性 (まとめ)

【公開情報】

Vulnerability Note VU#625617 (CERT, 2013/01/11)

Java 7 fails to restrict access to privileged code

http://www.kb.cert.org/vuls/id/625617

◆JVNTA13-010A Oracle Java 7 に脆弱性 (JVN, 2013/01/11)
http://jvn.jp/cert/JVNTA13-010A/index.html


【参考資料】

◆0 day 1.7u10 (CVE-2013-0422) spotted in the Wild - Disable Java Plugin NOW !
http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.html

◆New year, new Java zeroday
http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/

◆[SE-2012-01] 'Fix' for Issue 32 exploited by new Java 0-day code
http://seclists.org/bugtraq/2013/Jan/48


【Exploit Code】

Java 0day 1.7.0_10 decrypted source
http://pastebin.com/raw.php?i=cUG2ayjh


【修正プログラム】

Java Downloads for All Operating Systems (Oracle, 2012/01/14)

Recommended Version 7 Update 11

http://java.com/ja/download/manual.jsp


Copyright (C) 谷川哲司 (Tetsuji Tanigawa) 2006 - 2017