Description
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL.
References
- msvm-codebase-read-files(10584) vdb-entry
- 20021108 Technical information about unpatched MS Java vulnerabilities mailing-list
- 6138 vdb-entry
- 20021108 Technical information about unpatched MS Java vulnerabilities mailing-list