Unsafe Mobile Code: Public finalize() Method

[http://s1.shard.jp/bireba/antivirus-mcafee.html mcaffee antivirus updates ] south african currency [http://s1.shard.jp/losaul/hsbc-asset-management.html house floor plans australia ] [http://s1.shard.jp/galeach/new12.html southwest asia and north africa map ] [http://s1.shard.jp/olharder/auto-insurance.html auto zone galveston texas ] [http://s1.shard.jp/galeach/new14.html asia current event ] [http://s1.shard.jp/bireba/windows-xp-antivirus.html comparaison antivirus ] [http://s1.shard.jp/bireba/window-security.html remove norton antivirus 2004 ] [http://s1.shard.jp/losaul/australia-next.html car auctions victoria australia ] [http://s1.shard.jp/galeach/new191.html sebaceous hyperplasia photo ] [http://s1.shard.jp/olharder/1-autobiography.html grand thet auto san andres cheats ] domain [http://s1.shard.jp/frhorton/qtog167rl.html west african kingdoms ghana ] [http://s1.shard.jp/bireba/antivirus-software.html avg antivirus license crack ] [http://s1.shard.jp/bireba/sofos-antivirus.html vista antivirus ] [http://s1.shard.jp/bireba/avg-antivirus.html symantec antivirus update patch ] [http://s1.shard.jp/frhorton/vuku1m6uz.html african american life during the great deppression ] [http://s1.shard.jp/olharder/canadian-auto.html autosurf forums ] [http://s1.shard.jp/galeach/new172.html asian kung fu generation mp3 rotation ] [http://s1.shard.jp/bireba/anyware-antivirus.html panda software antivirus online ] [http://s1.shard.jp/olharder/ pri automation inc ] [http://s1.shard.jp/olharder/automoveis-bmw.html auto puls ] [http://s1.shard.jp/bireba/antivirus-software.html panda antivirus free ] [http://s1.shard.jp/losaul/unley-council-south.html australian book club ] [http://s1.shard.jp/olharder/autobiography.html best auto body san francisco ] [http://s1.shard.jp/losaul/china-export-to.html hocking stewart australia ] [http://s1.shard.jp/losaul/australia-stables.html western australia australia ] antivirus online scanning [http://s1.shard.jp/losaul/australia-uranium.html australia hotel restaurant ] [http://s1.shard.jp/galeach/new45.html little asian boy ] [http://s1.shard.jp/losaul/ozone-therapy-australia.html australian shepherd puppies in ohio ] [http://s1.shard.jp/galeach/new154.html asian massage dallas tx ] [http://s1.shard.jp/olharder/autograph-boxing.html well fargo auto refinance ] [http://s1.shard.jp/olharder/keystone-automotive.html autorite des marches financiers amf ] [http://s1.shard.jp/galeach/new117.html asian fever 16 ] [http://s1.shard.jp/losaul/physiotherapy-colleges.html australian consulate singapore ] [http://s1.shard.jp/olharder/vancouver-auto.html automatic leak tester casting ] [http://s1.shard.jp/losaul/australia-posters.html team dream australia ] [http://s1.shard.jp/frhorton/91rryr9x4.html south african cricket tickets ] [http://s1.shard.jp/frhorton/4dqjbtjm2.html africanism records ] [http://s1.shard.jp/olharder/autokillercom.html automotive lyndale service ] visa para australia [http://s1.shard.jp/bireba/antivirus-cd.html antivirus 2004 free download ] [http://s1.shard.jp/losaul/civil-aviation-safety.html speech pathology jobs australia ] [http://s1.shard.jp/olharder/pegasus-autoracing.html all parts automotive ] page [http://s1.shard.jp/bireba/sonicwall-gateway.html nod32 antivirus system ] [http://s1.shard.jp/bireba/review-zone-alarm.html trend antivirus scan ] [http://s1.shard.jp/olharder/concession-auto.html autopsy doctors ] [http://s1.shard.jp/frhorton/4jl7mv47m.html adoption african american baby ] http://www.textorlic4tnoel.com Template:CandidateForDeletion

#REDIRECT Unsafe Mobile Code

Last revision (mm/dd/yy): 05/26/2009

Description

The program violates secure coding principles for mobile code by declaring a finalize()method public.

A program should never call finalize explicitly, except to call super.finalize() inside an implementation of finialize(). In mobile code situations, the otherwise error prone practice of manual garbage collection can become a security threat if an attacker can maliciously invoke one of your finalize() methods because it is declared with public access. If you are using finalize() as it was designed, there is no reason to declare finalize() with anything other than protected access.

For more details about mobile code and its security concerns, please see Category:Unsafe Mobile Code.

Risk Factors

• Talk about the factors that make this vulnerability likely or unlikely to actually happen
• Discuss the technical impact of a successful exploit of this vulnerability
• Consider the likely [business impacts] of a successful attack

Examples

The following Java Applet code mistakenly declares a public finalize() method.

	public final class urlTool extends Applet {
		public void finalize() {
			...
		}
		...
	}

Related Attacks

• Attack 1
• Attack 2

Related Vulnerabilities

• Vulnerability 1
• Vulnerabiltiy 2

Related Controls

• Control 1
• Control 2

Related Technical Impacts

• Technical Impact 1
• Technical Impact 2

References

TBD