CyberRota Analysis
AI-GeneratedA high-severity sandbox escape vulnerability in OpenJDK packages on Ubuntu allows compromised applications to execute arbitrary code outside their sandbox. This occurs when the mailcap package is installed, enabling malicious .jar files to be executed if marked as executable. Organizations using Ubuntu with OpenJDK should prioritize patching this vulnerability to mitigate the risk of unauthorized code execution.
Original NVD Description
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.