...
| Code Block | ||
|---|---|---|
| ||
public static void loadLibrary() {
System.loadLibrary("/com/foo/HardcodedLib.so");
}
|
Risk Assessment
TODOAllowing untrusted code to load libraries using the immediate caller's class loader may seriously compromise the security of a java application.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
SEC03-J | ?? medium ?? | probable | ?? high | P?? | L?? |
Automated Detection
...
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
References
| Wiki Markup |
|---|
\[[SCG 07|AA. Java References#SCG 07]\] Guideline 6-3 Safely invoke standard APIs that perform tasks using the immediate caller's class loader instance |