Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2010-04-15T21:12:00
Updated: 2024-08-07T01:21:19.151Z
Reserved: 2010-04-15T00:00:00
Link: CVE-2010-1423
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-04-15T21:30:00.290
Modified: 2024-11-21T01:14:23.003
Link: CVE-2010-1423
Redhat