Description
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
References
- 1000200 vendor-advisory
- 20050318 Java Web Start argument injection vulnerability mailing-list
- 200255 vendor-advisory
- http://jouko.iki.fi/adv/ws.html
- 12847 vdb-entry
- 14640 third-party-advisory
- 57740 vendor-advisory
- GLSA-200503-28 vendor-advisory
- SUSE-SA:2005:032 vendor-advisory