Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun JDK和JRE Java Web Start权限许可和访问控制漏洞
Vulnerability Description
Sun JDK和JRE 6 Update 2版本及其早期版本, JDK和JRE 5.0 Update 12版本及其早期版本, SDK和JRE 1.4.2_15版本及其早期版本,以及SDK和JRE 1.3.1_20版本及其早期版本的的Java Web Start不能正确执行对以下不被信任的文件限制：(1)应用程序以及(2) applets,当本地用户执行drag-and-drop操作不被信任的应用程序或desktop应用程序的特定类型的applet window时， 用户协助式的远程攻击者可以复制或重命名任
CVSS Information
N/A
Vulnerability Type
N/A