Note: This is an archival copy of Security Sun Alert 201308 as previously published on http://sunsolve.sun.com.
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1000986.1.
Article ID : 1000986.1
Article Type : Sun Alerts (SURE)
Last reviewed : 2010-05-20
Audience : PUBLIC
Copyright Notice: Copyright © 2010, Oracle Corporation and/or its affiliates.

Java Virtual Machine (JVM) May Crash Due to Vulnerability in the Java Media Framework (JMF)

Category
Security

Release Phase
Resolved

Bug Id
4850093

Date of Resolved Release
14-MAY-2003

Impact

A vulnerability in the Java(TM) Media Framework (JMF) may potentially allow an untrusted applet to exit unexpectedly ("crash") the Java Virtual Machine (JVM) or gain unauthorized privileges..

Sun acknowledges, with thanks, Marc Schoenefeld for bringing this issue to our attention.


Contributing Factors

This issue can occur in the following releases:

  • Java Media Framework (JMF) 2.1.1 for Windows, Solaris, and Linux
  • Java Media Framework (JMF) 2.1.1a for Windows, Solaris, and Linux
  • Java Media Framework (JMF) 2.1.1b for Windows, Solaris, and Linux
  • Java Media Framework (JMF) 2.1.1c for Windows, Solaris, and Linux

Symptoms

The Java Virtual Machine exits unexpectedly ("crashes").


Workaround

There is no workaround. Please see the "Resolution" section below.


Resolution

This issue is addressed in the following releases:

  • Java Media Framework (JMF) 2.1.1e or later for Windows, Solaris, and Linux

Java Media Framework (JMF) 2.1.1e or later is available at http://java.sun.com/products/java-media/jmf/index.html.



Modification History


 













































Attachments
This solution has no attachment