Oracle.Java.AtomicReferenceArray.Sandbox.Bypass

Description

This indicates an attack attempt against a Sandbox Bypass vulnerability in Oracle Java Runtime Environment.
The vulnerability is caused by an error when the software handles specially crafted Java files. It allows a remote attacker to bypass sandbox security restriction to write and execute files on the victim's computer.

Affected Products

Oracle Java Runtime Environment version less than 1.5.0_34
Oracle Java Runtime Environment version less than 1.6.0_31
Oracle Java Runtime Environment version less than 1.7.0_03
Java SE 6u95
Java SE 7u80
Java SE 8u45
Java SE Embedded 7u75
Java SE Embedded 8u33

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply updates or fixes from the vendor:
http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

References