Sun Java Web Start Arbitrary Command Line Injection Exploit Update

Argument injection vulnerability in the URI handler in Java Deployment Toolkit allows remote attackers to execute arbitrary code via the -J argument to javaws.exe, which is processed by the launch method.



This update adds support for Windows Vista and Windows 7.