The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Nov 2, 2011 | Apr 15, 2010 |
| Ubuntu | — | Upgrade sun-java6 | Nov 19, 2024 | Apr 15, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub