OSVDB: The Open Source Vulnerability Database

Creditee: Peter Csepely

Known Contact Information:

(as of 2008-07-08)
(as of 2009-11-03)

Known Affiliations:

Zero Day Initiative (ZDI) (as of 2008-07-08)

Disclosed Vulnerabilities (5):

Disc. Date	OSVDB ID	CVEID	Title
2009-11-03	59716	2009-3866	Sun Java JDK / JRE Web Start Crafted Installer Extension JNLP Handling Trusted Code Execution
2008-12-03	50497	2008-5339	Sun Java JDK / JRE Java Web Start Application JNLP File Handling Socket Restriction Bypass
2008-12-03	50509	2008-5340	Sun Java JDK / JRE Java Web Start Application file: Protocol Arbitrary File Access
2008-12-03	50511	2008-5341	Sun Java JDK / JRE Java Web Start SingleInstanceImpl Class SI_FILEDIR Property Application Information Enumeration
2008-07-08	46958	2008-3112	Sun Java JDK / JRE Java Web Start CacheEntry Class writeManifest() Method Arbitrary File Creation

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.