Mac Os X Java Calendar Deserialisation Code Execution Vulnerability

[Peaches]

Mac OS X Java Calendar Deserialisation Code Execution Vulnerability

Highly critical

"A vulnerability has been discovered in Mac OS X, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the deserialisation of Calendar objects in Java for Mac OS X. This can be exploited to escape the Java sandbox and execute arbitrary code e.g. when a user visits a web page containing a specially crafted Java applet.

This is related to vulnerability #14 in:

SA32991

The vulnerability is confirmed in Mac OS X 10.5.7. Other versions may also be affected."

Secunia advisories - http://secunia.com/advisories/35118/

>>>>>>>>>>>>>>>>>>