The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote malicious users to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
sun jre 1.5.0 |
||
sun jre 1.5.0_11-b03 |