Sun has acknowledged a vulnerability in the Java Web Start of the Java 2 Platform, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error within the use of system classes. This can e.g. be exploited to read and write to local files via malicious Java Web Start Applications.

The vulnerability is reported in Java Web Start in JDK and JRE 5.0 Update 10 and Java Web Start in SDK and JRE 1.4.2_13 and earlier for Windows, Solaris and Linux.

Solution
Update to Java Web Start in JDK and JRE 5.0 Update 11 or later, or Java Web Start in SDK and JRE 1.4.2_14 or later.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits the Fujitsu security team.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102881-1

Deep Links
Links available to Secunia VIM customers