EUVD-2009-3855

Malware in sbrugna...

Information Disclosure

java is vulnerable to information disclosure. The vulnerability exists as an information leak was found in the way the TimeZone.getTimeZone method was handled. This method could load time zone files that are outside of the JREHOME/lib/zi/ directory, allowing a remote attacker to probe the local...