458 matches found
PT-2001-1156 · Ibm · Lotus Notes Client
Name of the Vulnerable Software and Affected Versions: Lotus Notes Client R5 Description: The issue concerns the Extended Control List ECL feature of the Java Virtual Machine JVM in the affected software. It allows malicious web site operators to determine the existence of files on the client by...
CVE-2000-1117
The Extended Control List ECL feature of the Java Virtual Machine JVM in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method...
Дырка в виртуальной машине Java клиента Lotus Notes
Дырка в виртулаьной машине позволяет проверять наличие файла на клиентской машине...
Lotus Notes Client R5 File Existence Verification Vulnerability
Description Lotus Notes Client R5 is a messaging and collaboration tool that contains a built in web browser. The web browser implements a Java Virtual Machine VM designed specifically for Lotus Notes. A security vulnerability exists in the Execution Control List ECL feature within the Java VM th...
CVE-1999-0440
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0440
The byte code verifier component of the Java Virtual Machine JVM allows remote execution through malicious web pages...
[SECURITY] New version of Netscape Communicator/Navigator released
Package: netscape communicator, navigator Vulnerability: remote exploit Debian-specific: no Existing Netscape Communicator/Navigator packages contain the following vulnerabilities: 1. Netscape Communicator JPEG-Comment Heap Overwrite Vulnerability - executes arbitrary code in the comment field of...
FreeBSD-SA-00:39.netscape
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:39 Security Advisory FreeBSD, Inc. Topic: Two vulnerabilities in Netscape Category: ports Module: netscape Announced: 2000-08-28 Credits: Solar Designer Vulnerability 1...
CVE-2000-0132
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function...
CVE-2000-0132
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function...
Microsoft Virtual Machine 2000 - Series3000 Series getSystemResource
Microsoft Virtual Machine 2000 - Series3000 Series getSystemResource source: https://www.securityfocus.com/bid/957/info Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application. This can be done two ways: 1: Via the getSystemResourceAsStream...
Microsoft Virtual Machine 2000 - Series/3000 Series getSystemResource
source: https://www.securityfocus.com/bid/957/info Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application. This can be done two ways: 1: Via the getSystemResourceAsStream function. The filename must be specified, and must be in certain paths...
CVE-1999-0766
CVE-1999-0766 : Multiple sources describe a vulnerability in the Microsoft Java Virtual Machine where a malicious Java applet can escape the sandbox and execute arbitrary commands outside it. The underlying issue is that the applet’s actions are not properly restricted by the sandbox, enabling co...
CVE-1999-0766
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment...
CVE-1999-0766
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment...
nt4.java-vm.y2k.txt
Date: Tue, 23 Mar 1999 20:27:54 -0500 From: Andrew Kunz To: [email protected] Subject: additionally NT Y2K issue post SP4 It should also be pointed out that the java virtual machine that installs with IE on the sp4 CD is not y2k compliant either and needs to be upgraded...
java.jvm.byte.code.ver.txt
Date: Mon, 5 Apr 1999 08:56:10 -0400 From: Gary McGraw To: [email protected] Subject: Security Hole in Java 2 and JDK 1.1.x Hi all, Karsten Sohr at the University of Marburg in Germany email [email protected] has discovered a very serious security flaw in several current versions ...