View Full Version: Java Web Start Sandbox Security Bypass Vuln.

Popular Technology > Alerts and Advisories > Java Web Start Sandbox Security Bypass Vuln.


Title: Java Web Start Sandbox Security Bypass Vuln.
Description: Highly Critical


Andrew - February 8, 2006 11:46 AM (GMT)
QUOTE
A vulnerability has been reported in Java Web Start, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error, which may be exploited by a malicious, untrusted application to read and write local files.

The vulnerability affects Java Web Start included in J2SE releases 5.0 Update 5 and prior 5.0 releases for Windows, Solaris, and Linux.


Solution:
The vulnerability has been fixed in J2SE releases 5.0 Update 6 and later for Windows, Solaris, and Linux.

http://java.sun.com/j2se/1.5.0/download.jsp




* Hosted for free by InvisionFree