Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-04-15T21:12:00

Updated: 2024-08-07T01:21:19.151Z

Reserved: 2010-04-15T00:00:00

Link: CVE-2010-1423

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-04-15T21:30:00.290

Modified: 2024-11-21T01:14:23.003

Link: CVE-2010-1423

cve-icon Redhat

Severity : Critical

Publid Date: 2010-04-09T00:00:00Z

Links: CVE-2010-1423 - Bugzilla