>> Sun Java Web Start System Classes Security Bypass and Code Execution Vulnerability
Title : Sun Java Web Start System Classes Security Bypass and Code Execution Vulnerability VUPEN ID : VUPEN/ADV-2007-1598 CVE ID : CVE-2007-2435
Rated as : High Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-05-01
Technical Description
A vulnerability has been identified in Java Web Start, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by an unspecified error when using system classes, which could be exploited by malicious web sites to cause an untrusted application to elevate its privileges and gain permissions to read and write local files with the privileges of the user running the Java Web Start application.
