发布日期：2011-02-15
更新日期：2011-02-15

受影响系统：

Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele
Oracle Sun JRE Sun JRE (Linux Production Rele

不受影响系统：

Oracle Sun JRE Sun JRE (Windows Production Re
Oracle Sun JRE Sun JRE (Solaris Production Re
Oracle Sun JRE Sun JRE (Linux Production Rele

描述：

---

BUGTRAQ  ID: 46388
CVE ID: CVE-2010-4452

Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。

Oracle Java的"Applet2ClassLoader"类在Java运行时环境中存在远程代码执行漏洞，攻击者可利用此漏洞以系统级别的权限执行任意代码。

sun.plugin2.applet.Applet2ClassLoader类的findClass方法中存在漏洞，由于没有正确验证可疑程序提供的URL，可能会在Windows 32位和64位以及Linux 32位上以SYSTEM权限执行任意代码。

<*来源：Frederic Hoguin
  *>

建议：

---

厂商补丁：

Oracle
------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

http://www.oracle.com

浏览次数：4567
严重程度：0（网友投票）