Check Point Advisories

Update Protection against Sun Java GIF Image Remote Code Execution Vulnerability

Check Point Reference:	CPAI-2007-063
Date Published:	13 May 2007
Severity:	High
Last Updated:	Monday 01 January, 2007
Source:	FrSIRT/ADV-2007-0211
Industry Reference:	CVE-2007-0243
Protection Provided by:
Who is Vulnerable?	Sun JDK version 5.0 Update 9 and prior Sun SDK version 1.4.2_12 and prior Sun SDK version 1.3.1_18 and prior Sun JRE version 5.0 Update 9 and prior Sun JRE version 1.4.2_12 and prior Sun JRE version 1.3.1_18 and prior
Vulnerability Description	A remote code execution vulnerability exists in Sun Java Runtime Environment (JRE). The Sun Java Runtime Environment allows users to run Java applications in a browser or as standalone programs. A remote attacker can exploit this issue to take complete control over an affected system.
Update/Patch Avaliable	Upgrade your vulnerable product: Java
Vulnerability Details	This vulnerability is due to a buffer overflow error in Sun JRE when processing malformed GIF files. An attacker can exploit this flaw via a malformed Java GIF file. Successful exploitation may allow the attacker to execute arbitrary code on a target system.