The version of Sun Java Runtime Environment (JRE) installed on the remote host reportedly does not securely process XSLT stylesheets containing XSLT Transforms in XML Signatures.  If an attacker can pass a specially crafted XSLT stylesheet to a trusted Java application running on the remote host, it may be possible to execute arbitrary code subject to the privileges under which the application operates.

The version of Sun Java Runtime Environment (JRE) installed on the remote host reportedly does not securely process XSLT stylesheets containing XSLT Transforms in XML Signatures.  If an attacker can pass a specially crafted XSLT stylesheet to a trusted Java application running on the remote host, arbitrary code could be executed, subject to the privileges under which the application operates.

報告によると、リモートホストにインストールされている Sun Java Runtime Environment（JRE）のバージョンは、XML 署名に XSLT 変換がある XSLT スタイルシートを安全に処理していません。攻撃者は、リモートホストで実行中の信頼できる Java アプリケーションに、特別に細工された XSLT スタイルシートを渡すことができる場合、アプリケーションが操作する権限に基づき、任意のコードを実行できる可能性があります。

The remote host is affected by the vulnerability described in GLSA-200709-15 (BEA JRockit: Multiple vulnerabilities)

    An integer overflow vulnerability exists in the embedded ICC profile     image parser (CVE-2007-2788), an unspecified vulnerability exists in     the font parsing implementation (CVE-2007-4381), and an error exists     when processing XSLT stylesheets contained in XSLT Transforms in XML     signatures (CVE-2007-3716), among other vulnerabilities.
  Impact :

    A remote attacker could trigger the integer overflow to execute     arbitrary code or crash the JVM through a specially crafted file. Also,     an attacker could perform unauthorized actions via an applet that     grants certain privileges to itself because of the font parsing     vulnerability. The error when processing XSLT stylesheets can be     exploited to execute arbitrary code. Other vulnerabilities could lead     to establishing restricted network connections to certain services,     Cross Site Scripting and Denial of Service attacks.
  Workaround :

    There is no known workaround at this time for all these     vulnerabilities.

据报告，远程主机上安装的 Sun Java Runtime Environment (JRE) 版本未安全地处理 XML 签名中包含 XSLT 转换的 XSLT 样式表。如果攻击者可将特别构建的 XSLT 样式表传递到远程主机上运行的受信任的 Java 应用程序，可能可以以运行该应用程序的权限执行任意代码。

遠端主機上安裝的 Sun Java Runtime Environment (JRE) 版本據報無法安全處理 XML 簽章中含有 XSLT 轉換的 XSLT 樣式表。如果攻擊者可以傳送特製的 XSLT 樣式表至遠端主機上執行的受信任 Java 應用程式，視應用程式運作所需的權限而定，可能會執行任意程式碼。

ID	名稱	產品	系列	已發布	已更新	嚴重性
64822	Sun Java JRE XML Signature Command Injection (102993) (Unix)	Nessus	Misc.	2013/2/22	2022/4/11	high
25709	Sun Java JRE XML Signature Command Injection (102993)	Nessus	Windows	2007/7/16	2022/4/11	high
64822	Sun Java JRE XML 署名コマンドの注入（102993）（Unix）	Nessus	Misc.	2013/2/22	2022/4/11	high
26117	GLSA-200709-15 : BEA JRockit: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2007/9/25	2021/1/6	high
64822	Sun Java JRE XML 签名命令注入 (102993) (Unix)	Nessus	Misc.	2013/2/22	2022/4/11	high
64822	Sun Java JRE XML 簽章命令插入 (102993) (Unix)	Nessus	Misc.	2013/2/22	2022/4/11	high

偵測

搜尋 Plugin

high

high

high

high

high

high