source: wwwsecurityfocuscom/bid/957/info
Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application This can be done two ways:
1: Via the getSystemResourceAsStream() function The filename must be specified, and must be in certain paths: the JVM 'home' directory, and any directory in t ...