Description
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath() method in a File() call.
References
- 20021108 Technical information about unpatched MS Java vulnerabilities mailing-list
- 6139 vdb-entry
- 20021108 Technical information about unpatched MS Java vulnerabilities mailing-list