Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Changed the Risk Assessment section

...

If a direct pointer to a Java object is used then erroneous results may be obtained that could lead to the code crashing. This, in turn, could be used to mount a denial of service attack.  In some circumstances, the direct pointer could become a "dangling pointer" which could result in sensitive information being leaked or malicious execution of arbitrary code.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

JNI02-J

LowHigh

Probable

Low

P6P18

L2L1

Automated Detection

Direct pointers to Java objects can be detected and replaced by indirect handles automatically.

...