The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote malicious users to bypass the security checks that are performed by the load() method.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
microsoft java virtual machine 1.1 |