java 1day analyze

gistfile1.cpp

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0809
http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/fa09ada25c47

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1493
http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/4f97a6256473
////////////////////////////////////////////////////////////
http://icedtea.classpath.org/hg/release/icedtea6-1.12/file/2e114710f951/patches/security
     2.1 --- a/NEWS  Tue Feb 19 16:15:47 2013 -0500
     2.2 +++ b/NEWS  Wed Feb 20 11:41:10 2013 +1100
     2.3 @@ -13,8 +13,8 @@
     2.4  New in release 1.12.3 (2013-02-19):
     2.5  
     2.6  * Security fixes
     2.7 -  - S8006446: Restrict MBeanServer access
     2.8 -  - S8006777: Improve TLS handling of invalid messages
     2.9 +  - S8006446, CVE-2013-1486: Restrict MBeanServer access
    2.10 +  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
    2.11    - S8007688: Blacklist known bad certificate
    2.12  * Backports
    2.13    - S8007393: Possible race condition after JDK-6664509
    

cve-2013-0431
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jmxbean_2.rb
cve-2013-1493
http://malware.dontneedcoffee.com/2013/03/cve-2013-1493-jre17u15-jre16u41.html
2D intergrating exploit

http://media.blackhat.com/bh-ad-11/Drake/bh-ad-11-Drake-Exploiting_Java_Memory_Corruption-WP.pdf

"C:\Program Files\Java\jdk1.7.0_01\bin\jar.exe" -cvfm 12334.jar MANIFEST.MF .