This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Unsafe Mobile Code: Public finalize() Method"

From OWASP
Jump to: navigation, search
(Reverting to last version not containing links to www.textorlic4tnoel.com)
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
[http://s1.shard.jp/bireba/antivirus-mcafee.html mcaffee antivirus updates
 
] [http://s1.shard.jp/frhorton/h8s9rb8r9.html south african currency] [http://s1.shard.jp/losaul/hsbc-asset-management.html house floor plans australia
 
] [http://s1.shard.jp/galeach/new12.html southwest asia and north africa map
 
] [http://s1.shard.jp/olharder/auto-insurance.html auto zone galveston texas
 
] [http://s1.shard.jp/galeach/new14.html asia current event
 
] [http://s1.shard.jp/bireba/windows-xp-antivirus.html comparaison antivirus
 
] [http://s1.shard.jp/bireba/window-security.html remove norton antivirus 2004
 
] [http://s1.shard.jp/losaul/australia-next.html car auctions victoria australia
 
] [http://s1.shard.jp/galeach/new191.html sebaceous hyperplasia photo
 
] [http://s1.shard.jp/olharder/1-autobiography.html grand thet auto san andres cheats
 
] [http://s1.shard.jp/olharder/autoroll-654.html domain] [http://s1.shard.jp/frhorton/qtog167rl.html west african kingdoms ghana
 
] [http://s1.shard.jp/bireba/antivirus-software.html avg antivirus license crack
 
] [http://s1.shard.jp/bireba/sofos-antivirus.html vista antivirus
 
] [http://s1.shard.jp/bireba/avg-antivirus.html symantec antivirus update patch
 
] [http://s1.shard.jp/frhorton/vuku1m6uz.html african american life during the great deppression
 
] [http://s1.shard.jp/olharder/canadian-auto.html autosurf forums
 
] [http://s1.shard.jp/galeach/new172.html asian kung fu generation mp3 rotation
 
] [http://s1.shard.jp/bireba/anyware-antivirus.html panda software antivirus online
 
] [http://s1.shard.jp/olharder/ pri automation inc
 
] [http://s1.shard.jp/olharder/automoveis-bmw.html auto puls
 
] [http://s1.shard.jp/bireba/antivirus-software.html panda antivirus free
 
] [http://s1.shard.jp/losaul/unley-council-south.html australian book club
 
] [http://s1.shard.jp/olharder/autobiography.html best auto body san francisco
 
] [http://s1.shard.jp/losaul/china-export-to.html hocking stewart australia
 
] [http://s1.shard.jp/losaul/australia-stables.html western australia australia
 
] [http://s1.shard.jp/bireba/antivirus-online.html antivirus online scanning] [http://s1.shard.jp/losaul/australia-uranium.html australia hotel restaurant
 
] [http://s1.shard.jp/galeach/new45.html little asian boy
 
] [http://s1.shard.jp/losaul/ozone-therapy-australia.html australian shepherd puppies in ohio
 
] [http://s1.shard.jp/galeach/new154.html asian massage dallas tx
 
] [http://s1.shard.jp/olharder/autograph-boxing.html well fargo auto refinance
 
] [http://s1.shard.jp/olharder/keystone-automotive.html autorite des marches financiers amf
 
] [http://s1.shard.jp/galeach/new117.html asian fever 16
 
] [http://s1.shard.jp/losaul/physiotherapy-colleges.html australian consulate singapore
 
] [http://s1.shard.jp/olharder/vancouver-auto.html automatic leak tester casting
 
] [http://s1.shard.jp/losaul/australia-posters.html team dream australia
 
] [http://s1.shard.jp/frhorton/91rryr9x4.html south african cricket tickets
 
] [http://s1.shard.jp/frhorton/4dqjbtjm2.html africanism records
 
] [http://s1.shard.jp/olharder/autokillercom.html automotive lyndale service
 
] [http://s1.shard.jp/losaul/visa-para-australia.html visa para australia] [http://s1.shard.jp/bireba/antivirus-cd.html antivirus 2004 free download
 
] [http://s1.shard.jp/losaul/civil-aviation-safety.html speech pathology jobs australia
 
] [http://s1.shard.jp/olharder/pegasus-autoracing.html all parts automotive
 
] [http://s1.shard.jp/olharder/autoroll-654.html page] [http://s1.shard.jp/bireba/sonicwall-gateway.html nod32 antivirus system
 
] [http://s1.shard.jp/bireba/review-zone-alarm.html trend antivirus scan
 
] [http://s1.shard.jp/olharder/concession-auto.html autopsy doctors
 
] [http://s1.shard.jp/frhorton/4jl7mv47m.html adoption african american baby
 
 
http://www.textorlic4tnoel.com
 
 
{{template:CandidateForDeletion}}
 
{{template:CandidateForDeletion}}
  

Latest revision as of 18:29, 27 May 2009

Template:CandidateForDeletion

#REDIRECT Unsafe Mobile Code


Last revision (mm/dd/yy): 05/27/2009


Description

The program violates secure coding principles for mobile code by declaring a finalize()method public.

A program should never call finalize explicitly, except to call super.finalize() inside an implementation of finialize(). In mobile code situations, the otherwise error prone practice of manual garbage collection can become a security threat if an attacker can maliciously invoke one of your finalize() methods because it is declared with public access. If you are using finalize() as it was designed, there is no reason to declare finalize() with anything other than protected access.

For more details about mobile code and its security concerns, please see Category:Unsafe Mobile Code.


Risk Factors

  • Talk about the factors that make this vulnerability likely or unlikely to actually happen
  • Discuss the technical impact of a successful exploit of this vulnerability
  • Consider the likely [business impacts] of a successful attack


Examples

The following Java Applet code mistakenly declares a public finalize() method.

	public final class urlTool extends Applet {
		public void finalize() {
			...
		}
		...
	}


Related Attacks


Related Vulnerabilities


Related Controls


Related Technical Impacts


References

TBD