1318 matches found
Mac OS X v10.0.x J2SE v1.3 clipboard tapping vulnerability
Java runtime J2SE for Mac OS X v10.0.x has a security hole. It seems to have been fixed in Mac OS X v10.1. http://www.apple.com/support/security/securityupdates.html Security updates are listed below according to the software release in which they first appeared: Mac OS X v10.1 o system clipboard...
Проблемы с Java Plugin 1.4 (file reading)
Апплеты не имеющие корректного сертификата тем не менее могут обращаться к файловой системе...
Various problems in Ternd Micro AppletTrap URL filtering
Monday 9 July 2001 eDvice Security Services Advisory - Various problems in Trend Micro AppletTrap URL filtering Product Background ------------------ Trend Micro AppletTrap is a product for blocking malicious Java applets, malicious JavaScript and unsecured ActiveX controls at the gateway. The...
Lotus Notes Java VM leaks file existence through timing difference in ECLs
Overview Lotus Notes JVM leaks information about the existence of a file. Description A malicious Java applet run in the Lotus Notes web browser can determine if a local file exists. Notes' preferences must be set to browse the web using the Notes browser, with execution of Java applets...
CVE-2001-0137
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerabili...
CVE-2001-0137
CVE-2001-0137 affects Windows Media Player 7. The vulnerability lets remote attackers cause the execution of malicious Java applets in Internet Explorer by embedding the applet in a skin.wmz skin file and referencing it via the skin in the codebase parameter of an applet tag (Windows Media Player...
CVE-2001-0137
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerabili...
CVE-2001-0068
Mac OS Runtime for Java MRJ 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter...
CVE-2001-0068
Mac OS Runtime for Java MRJ 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter...
CVE-2000-1061
Microsoft Virtual Machine VM in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM Active...
Re: BrownOrifice can break firewalls! NOW MSIE
Hi, The same security hole, exists in MSIE too, with one restriction: url can't start with file:. But still the applet from outside site, can access you intranet servers including ftps and ALL sites you have access to. The demonstration of the bug is here: http://www.oltres.com/ms-bug/ Thanx,...
Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket
source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the java.net.ServerSocket class to create a listening...
Netscape Communicator 4.x - URL Read
source: https://www.securityfocus.com/bid/1546/info A flaw in Netscape Communicator's implementation of Java allows malicious applets to read any resource reachable via a URL from the local machine by using the netscape.net.URLConnection and netscape.net.URLInputSteam classes. This allows malicio...
Netscape Communicator 4.x - URL Read
Netscape Communicator 4.x - URL Read source: https://www.securityfocus.com/bid/1546/info A flaw in Netscape Communicator's implementation of Java allows malicious applets to read any resource reachable via a URL from the local machine by using the netscape.net.URLConnection and...
CVE-1999-0141
CVE-1999-0141 concerns the Java Bytecode Verifier, where the verifier as implemented in the Java runtime allows malicious applets to execute arbitrary commands with the permissions of the applet user. The provided sources reiterate this description but do not specify affected products/versions, r...
CVE-1999-0141
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet...
netscape4.5-applets.txt
Date: Tue, 2 Feb 1999 13:42:32 -0800 From: Giao Nguyen To: [email protected] Subject: Unsecured server in applets under Netscape Just for kicks, I wrote a sample applet that listened on a socket. I discovered that when the applet was loaded under Netscape as tested with version 4.5, any hosts...