Bugtraq mailing list archives

Java Web start vulnerability


From: varun.srivastav () gmail com
Date: 25 Oct 2008 08:18:16 -0000

Hi,
 There is vulnerability in Java Web Start. Already there is some vulnerability posted  for persistenceservice service 
of java web start. But in Basicservice also we can run any file on the client using showDocument method. Just give the 
URL of file on client computer. If the browser has software attached to run that filetype it will be run automatically 
without user knowledge.
Regards
Varun Srivastava


Current thread: