Description
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
References
- 49983 vdb-entry
- MS11-079 vendor-advisory
- oval:org.mitre.oval:def:13032 vdb-entry signature