Java Virtal Machine.net

[ News ] rss

February 01, 2011

Mark Wielaard: New GPG key. Finally created a new GPG key using gnupg. The old one was a DSA/1024 bits one and 8 years old. The new one is a RSA/2048 bits one. I will use the new one in the future to sign any release tarballs I might create. pub 2048R/57816A6A 2011-01-29 Key f...

More »

February 01, 2011

Andrew Hughes: [SECURITY] IcedTea6 1.7.8, 1.8.5, 1.9.5 Released!. We are pleased to announce a new set of security releases, IcedTea6 1.7.8, IcedTea6 1.8.5 and IcedTea6 1.9.5. This update contains the following security updates: The IcedTea project provides a harness to build the source code from OpenJDK6 u...

More »

September/2020
SunMonTueWedThuFriSat
  12345
6789101112
13141516171819
20212223242526
272829 30   

[ Archives News
for 'Developers' ]

home > news > developers > jeroen frijters: ikvm.net security update

Jeroen Frijters: IKVM.NET Security Update

There is a bug IKVM's implementation of java.lang.reflect.Field.set(). The dynamic method that is generated doesn't properly cast the value to the type of the field. This is obviously a bug, but it could also lead to a type safety vulnerability. It is not directly exploitable, because the unverifiable dynamic method will do a full trust security demand and when there is partially trusted code ...


Date: July, 27 2010
Url: http://weblog.ikvm.net/PermaLink.aspx?guid=9c01c64e-7498-4845-86e5-0b130d680724


Others News

©2002-2019Java-Virtual-Machine.net es | website generator | best website builder software | bootstrap dropdown menu | css3 menu