Description
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
References
- 20041022 J2ME security vulnerabilities mailing-list
- 11041 vdb-entry
- http://www.theregister.co.uk/2004/10/22/mobile_java_peril/
- 20041022 J2ME security vulnerabilities mailing-list
- java2-command-execution(17825) vdb-entry
- 1011898 vdb-entry
- 12945 third-party-advisory