Oracle Java SE 7 Update 15 Code Fragment privileges management

Summaryinfo

A vulnerability was found in Oracle Java SE 7 Update 15. It has been declared as problematic. This impacts an unknown function of the component Code Fragment Handler. Such manipulation leads to privileges management. Furthermore, there is an exploit available. It is best to exchange the affected component with an alternative.

Detailsinfo

A vulnerability was found in Oracle Java SE 7 Update 15 (Programming Language Software). It has been rated as critical. Affected by this issue is some unknown processing of the component Code Fragment Handler. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability.

The issue has been introduced in 02/19/2013. The weakness was shared 03/04/2013 by Adam Gowdiak with Security Explorations as SE-2012-01 / Issue 60 as not defined advisory (Website). The advisory is available at security-explorations.com. The vendor was not involved in the coordination of the public release. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are unknown but a private exploit is available. The structure of the vulnerability defines a possible price range of USD $5k-$25k at the moment (estimation calculated on 04/13/2019). It is expected to see the exploit prices for this product decreasing in the near future.This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

A private exploit has been developed by Adam Gowdiak. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 13 days. During that time the estimated underground price was around $25k-$100k.

The problem might be mitigated by replacing the product with Microsoft Silverlight, Adobe Flash or Javascript as an alternative.

The vulnerability is also documented in the vulnerability database at OSVDB (90857†). packetstormsecurity.com is providing further details. The entries VDB-7870, VDB-7871, VDB-7872 and VDB-7873 are related to this item. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Programming Language Software

Vendor

• Oracle

Name

• Java SE

Version

• 7 Update 15

License

• open-source

Website

• Vendor: https://www.oracle.com

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion