JVN#18680611: Java Web Start may insecurely load dynamic libraries

Java Web Start is tool to distribute Java applications over the web and is contained in Java applications such as JRE (Java Runtime Environment) Java Web Start contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries.

Impact

An attacker may execute arbitrary code with the privilege of the running application.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• Java SE 6 Update 25 and earlier for Windows