Sun Security Update: Java

Sun Microsystems announced one new security update this morning. This update affects Java versions 1.3.1, 1.4.2, 5.0, and 6 for Windows, Solaris, and Linux. A buffer overflow in the image parsing code of the Java Runtime Environment (JRE) could allow an untrusted application to gain elevated privileges. In addition, a second vulnerability could allow an untrusted application to cause the Java Virtual Machine (JVM) to hang. Currently, no workaround exists to avoid the vulnerability, but upgrading to the latest release of Java addresses the problem. More detailed information can be found on SunSolve.