[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Java Web start vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Java Web start vulnerability
- From: varun.srivastav@xxxxxxxxx
- Date: 25 Oct 2008 08:18:16 -0000
Hi,
There is vulnerability in Java Web Start. Already there is some vulnerability
posted for persistenceservice service of java web start. But in Basicservice
also we can run any file on the client using showDocument method. Just give the
URL of file on client computer. If the browser has software attached to run
that filetype it will be run automatically without user knowledge.
Regards
Varun Srivastava