3 ms·
And so it can be exploited: http://www.scip.ch/en/?vuldb.10561 http://www.scip.ch/en/?vuldb.10561
by free652 13y ago
And so it can be exploited:
http://www.scip.ch/en/?vuldb.10561 http://www.scip.ch/en/?vuldb.10561
- meowface 13y agoThis is a buffer overflow exploit in the browser, not an exploit of the API mechanics. On the other hand, most critical Java vulnerabilities are simple sandbox bypasses, not memory corruption ones.
- pjmlp 13y ago> Java vulnerabilities are simple sandbox On Oracle's implementation. There are other JVMs to choose from. Plus, can you guarantee that the JavaScript sandbox from all VMs are safe if hackers turn their attention to them?
- meowface 13y agoIBM's JVM and OpenJDK's IcedTea have fallen victim to most (possibly all, not sure) of the exact same sandbox bypass flaws as the ones in Oracle's HotSpot, mostly because the codebase of all the other alternatives still contains a huge portion of Oracle's original code.