Sun/Netscape Java Virtual Machine1.x Bytecode Verifier Vulnerability

                                                source: http://www.securityfocus.com/bid/6224/info

A vulnerability in the Sun and Netscape Java Virtual Machine has been reported. The vulnerability is related to the bytecode verifier, a component of the Java compiler that ensures legal structure of Java instructions. According to the report, it is possible to construct bytecode that will cause objects to be instantiated without proper initialization. One known method of exploiting this vulnerability can allow for read/write access to system files despite the security constraints of the Applet sandbox.

http://www.exploit-db.com/sploits/22029-1.tar.gz

http://www.exploit-db.com/sploits/22029-2.tar.gz

http://www.exploit-db.com/sploits/22029-3.tar.gz

http://www.exploit-db.com/sploits/22029-4.tar.gz