Posted by ZDI Disclosures on Jun 08
ZDI-11-192: Oracle Java Web Start Command Argument Injection Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-11-192
June 8, 2011
— CVE ID:
CVE-2011-0863
— CVSS:
9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)
— Affected Vendors:
Oracle
— Affected Products:
Oracle Java Runtime
— TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine…
Source: ZDI-11-192: Oracle Java Web Start Command Argument Injection Remote Code Execution Vulnerability
