High Risk Vulnerability in JRockit Java Virtual Machine

Wade Alcorn and Marcus Pinto of NGSSoftware have discovered a high risk stack overflow vulnerability in BEA’s JRockit Java Virtual Machine which allows an arbitrary value to be written to the return address. This may lead to arbitrary code execution in the context of the current user.

BEA’s JRockit is deployed as part of the infrastructure of the WebLogic server. This issue is currently believed to only affect JRocket version 1.4.2_05.

The latest version can be downloaded from the BEA website: http://www.bea.com/. NGSSoftware are going to withhold details about these flaws for three months. This three month window will allow JRockit and Weblogic users the time needed to update before the details are released to the general public. This reflects NGSSoftware’s approach to responsible disclosure. Our stated policy can be found here: http://www.ngssoftware.com/brochures/disclosure.pdf

NGSSoftware Insight Security Research
http://www.ngssoftware.com/
+44(0)208 401 0070