Description
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.
References
- 20020817 Enableing java logging in MSIE is dangerous mailing-list
- ie-javalogging-code-execution(9886) vdb-entry
- 5491 vdb-entry