Unsafe Mobile Code: Public finalize() Method

[http://s1.shard.jp/bireba/antivirus-mcafee.html mcaffee antivirus updates ] south african currency [http://s1.shard.jp/losaul/hsbc-asset-management.html house floor plans australia ] [http://s1.shard.jp/galeach/new12.html southwest asia and north africa map ] [http://s1.shard.jp/olharder/auto-insurance.html auto zone galveston texas ] [http://s1.shard.jp/galeach/new14.html asia current event ] [http://s1.shard.jp/bireba/windows-xp-antivirus.html comparaison antivirus ] [http://s1.shard.jp/bireba/window-security.html remove norton antivirus 2004 ] [http://s1.shard.jp/losaul/australia-next.html car auctions victoria australia ] [http://s1.shard.jp/galeach/new191.html sebaceous hyperplasia photo ] [http://s1.shard.jp/olharder/1-autobiography.html grand thet auto san andres cheats ] domain [http://s1.shard.jp/frhorton/qtog167rl.html west african kingdoms ghana ] [http://s1.shard.jp/bireba/antivirus-software.html avg antivirus license crack ] [http://s1.shard.jp/bireba/sofos-antivirus.html vista antivirus ] [http://s1.shard.jp/bireba/avg-antivirus.html symantec antivirus update patch ] [http://s1.shard.jp/frhorton/vuku1m6uz.html african american life during the great deppression ] [http://s1.shard.jp/olharder/canadian-auto.html autosurf forums ] [http://s1.shard.jp/galeach/new172.html asian kung fu generation mp3 rotation ] [http://s1.shard.jp/bireba/anyware-antivirus.html panda software antivirus online ] [http://s1.shard.jp/olharder/ pri automation inc ] [http://s1.shard.jp/olharder/automoveis-bmw.html auto puls ] [http://s1.shard.jp/bireba/antivirus-software.html panda antivirus free ] [http://s1.shard.jp/losaul/unley-council-south.html australian book club ] [http://s1.shard.jp/olharder/autobiography.html best auto body san francisco ] [http://s1.shard.jp/losaul/china-export-to.html hocking stewart australia ] [http://s1.shard.jp/losaul/australia-stables.html western australia australia ] antivirus online scanning [http://s1.shard.jp/losaul/australia-uranium.html australia hotel restaurant ] [http://s1.shard.jp/galeach/new45.html little asian boy ] [http://s1.shard.jp/losaul/ozone-therapy-australia.html australian shepherd puppies in ohio ] asian massage dallas tx [http://s1.shard.jp/olharder/autograph-boxing.html well fargo auto refinance ] [http://s1.shard.jp/olharder/keystone-automotive.html autorite des marches financiers amf ] [http://s1.shard.jp/galeach/new117.html asian fever 16 ] [http://s1.shard.jp/losaul/physiotherapy-colleges.html australian consulate singapore ] [http://s1.shard.jp/olharder/vancouver-auto.html automatic leak tester casting ] [http://s1.shard.jp/losaul/australia-posters.html team dream australia ] [http://s1.shard.jp/frhorton/91rryr9x4.html south african cricket tickets ] [http://s1.shard.jp/frhorton/4dqjbtjm2.html africanism records ] [http://s1.shard.jp/olharder/autokillercom.html automotive lyndale service ] visa para australia [http://s1.shard.jp/bireba/antivirus-cd.html antivirus 2004 free download ] [http://s1.shard.jp/losaul/civil-aviation-safety.html speech pathology jobs australia ] [http://s1.shard.jp/olharder/pegasus-autoracing.html all parts automotive ] page [http://s1.shard.jp/bireba/sonicwall-gateway.html nod32 antivirus system ] [http://s1.shard.jp/bireba/review-zone-alarm.html trend antivirus scan ] [http://s1.shard.jp/olharder/concession-auto.html autopsy doctors ] [http://s1.shard.jp/frhorton/4jl7mv47m.html adoption african american baby ] http://www.textorlic4tnoel.com


 * 1) REDIRECT Unsafe Mobile Code

Last revision (mm/dd/yy): //

Description
The program violates secure coding principles for mobile code by declaring a finalizemethod public.

A program should never call finalize explicitly, except to call super.finalize inside an implementation of finialize. In mobile code situations, the otherwise error prone practice of manual garbage collection can become a security threat if an attacker can maliciously invoke one of your finalize methods because it is declared with public access. If you are using finalize as it was designed, there is no reason to declare finalize with anything other than protected access.

For more details about mobile code and its security concerns, please see Category:Unsafe Mobile Code.

Risk Factors

 * Talk about the factors that make this vulnerability likely or unlikely to actually happen
 * Discuss the technical impact of a successful exploit of this vulnerability
 * Consider the likely [business impacts] of a successful attack

Examples
The following Java Applet code mistakenly declares a public finalize method.

public final class urlTool extends Applet { public void finalize { ...		}		...	}

Related Attacks

 * Attack 1
 * Attack 2

Related Vulnerabilities

 * Vulnerability 1
 * Vulnerabiltiy 2

Related Controls

 * Control 1
 * Control 2

Related Technical Impacts

 * Technical Impact 1
 * Technical Impact 2