Java Web start vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Java Web start vulnerability
From: varun.srivastav@xxxxxxxxx
Date: 25 Oct 2008 08:18:16 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hi,
 There is vulnerability in Java Web Start. Already there is some vulnerability 
posted  for persistenceservice service of java web start. But in Basicservice 
also we can run any file on the client using showDocument method. Just give the 
URL of file on client computer. If the browser has software attached to run 
that filetype it will be run automatically without user knowledge.
Regards
Varun Srivastava

Prev by Date: HTTPBruteForcer released
Next by Date: Re: HTTPBruteForcer released
Previous by thread: Re: HTTPBruteForcer released
Next by thread: Re: Java Web start vulnerability
Index(es):
- Date
- Thread