Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft JVM跨域Applet未授权通信漏洞
Vulnerability Description
Microsoft JVM是一款使用在Win32操作环境中的Java虚拟机系统，Microsoft JVM包含在大部分Windows版本中，也既包含在大部分Internet Explorer版本中。 Microsoft JVM运行的applet允许跨域通信，远程攻击者可以利用这个漏洞可以绕过安全限制，交换跨站信息，获得敏感数据。 运行在Microsoft JVM的Applet共享通用数据结构，允许任意Applet写或访问而没有任何跨域安全检查，这会导致部分安全策略冲突，造成敏感信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A