Description
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.
References
- 20021108 Technical information about unpatched MS Java vulnerabilities mailing-list
- msvm-cabcracker-load-archive(10586) vdb-entry
- 6137 vdb-entry
- 20021108 Technical information about unpatched MS Java vulnerabilities mailing-list