Detecting a serious vulnerability in Java Runtime Environment

Security firm Secunia has warned a serious vulnerability in Sun Java Runtime Environment (JRE), which may allow hackers to take over the affected system.

The vulnerability was caused by a flaw in the JRE GIF image processing process, and could be exploited to attack the "heap" buffer through a GIF file created by hackers (zero width). ).

According to the warning, successful exploitation cases may allow executing binary code. The identified vulnerability affects versions:

* JDK and JRE 5.0 Update 9 and earlier versions.
* SDK and JRE 1.4.2_12 and earlier versions.
* SDK and JRE 1.3.1_18 and earlier versions.

Users can use the Secunia Software Inspector to check if the system is affected by the vulnerability.

Solution : Upgrade to higher versions:

+ JDK and JRE 5.0: Upgrade to JDK and JRE 5.0 Update 10 or higher: http://java.sun.com/javase/downloads/index_jdk5.jsp
+ SDK and JRE 1.4.x: Upgrade to SDK and JRE version 1.4.2_13 or higher: http://java.sun.com/j2se/1.4.2/download.html
+ SDK and JRE 1.3.x: Upgrade to SDK and JRE version 1.3.1_19 or higher: http://java.sun.com/j2se/1.3/download.html