CNCVE编号:CNCVE-20010068 CVE编号:CAN-2001-0068 安全级别:中 漏洞中文描述: 用于Java (MRJ) 2.2.3 的Mac OS Runtime允许远程攻击者通过ARCHIVE applet参数使用恶意applet来阅读CODEBASE上下文之外的文件。 漏洞英文描述: Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter. 漏洞参考: XF:mrj-runtime-malicious-applets BUGTRAQ:20001215 Security Hole of MRJ 2.2.3 (Mac OS Runtime for Java) - Inconsistent Use of CODEBASE and ARCHIVE Attributes - 系统类型: 其他 漏洞类型:权限有效性检查错误