Description
Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."
References
- msjvm-sandbox-bypass(16666) vdb-entry
- 10688 vdb-entry
- 20040710 Covert Channels allow Cross-Site-Java in Microsoft VM mailing-list