1790 matches found
Sun Java plugin privilege escalation
It's possible to access few internal classes...
jdk/jre -- Security Vulnerability With Java Plugin
The Sun Java Plugin capability in Java 2 Runtime Environment JRE 1.4.201, 1.4.204, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code...
Java XSLT security advisory addendum
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ Illegalaccess.org security advisory addendum ============================================ Vendor informed: April, 2004 Public Advisory released: August 2, 2004 Today: August 9, 2004 URL:...
Sun Solaris vulnerable to DoS when the Basic Security Module (BSM) is configured to perform auditing of specific classes
Overview There is a vulnerability in Sun Solaris that could allow local users to cause a denial of service when the Basic Security Module BSM is configured to perform auditing of specific audit classes. Description Sun Microsystems describes the Basic Security Module BSM as a "security auditing...
Advisory: Webster HTTP Server
ABSTRACT Webster HTTP Server is an HTTP/1.0 server written in C++ using Microsoft Foundation Classes MFC. It runs on Windows 95, 98, NT, 2000, Me, and XP platforms. It was first published as a sample application in Microsoft Journal MSJ. Multiple security flaws have been identified in Webster tha...
Microsoft Java implementation JDBC classes do not properly validate DLL requests
Overview The Java Database Connectivity JDBC classes of Microsoft's Java virtual machine VM do not properly validate DLL requests, allowing a malicious applet to load and execute any DLL on the client system. Description Microsoft's Java VM is installed on Windows 98, NT, 2000, and XP. It is used...
CVE-2000-1099
Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...
Netscape Communicator 4.x - URL Read
Netscape Communicator 4.x - URL Read source: https://www.securityfocus.com/bid/1546/info A flaw in Netscape Communicator's implementation of Java allows malicious applets to read any resource reachable via a URL from the local machine by using the netscape.net.URLConnection and...
PT-1999-1203 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns the HKEY CLASSES ROOT key in a Windows NT system, which has inappropriate, system-critical permissions. Recommendations: At the moment, there is no information about a...
