Technical Description

A vulnerability was identified in Java Web Start, which could be exploited by attackers to gain unauthorized access [...]

Solution

Upgrade to Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 Update 2 or later :
http://java.sun.com/j2se/1.5.0/download.jsp
Or disable Java Web Start applications from being launched from a web browser :
For Internet Explorer :
- Right click on the "Start" button and select "Explore"
- In the "Start Menu" window, select "Tools" = > "Folder Options"
- From the "Folder Options" window, select the "File Types" tab
- From the "Registered File Types" window, scroll down and locate the "JNLP - JNLP File"
- Select the "JNLP - JNLP File" and click the "Delete" button
For Mozilla :
- Select "Preferences" under the browser's "Edit" menu
- In the "Preferences" window, select "Helper Applications" located under the "Navigator" category
- Under "Files types", scroll down and locate "application/x-java-jnlp-file"
- Select "application/x-java-jnlp-file" and click the "Remove" button

ChangeLog

2005-06-14 : Initial release
2005-06-15 : Updated CVE

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.