← Database

CVE-2008-4910

CRITICAL CVSS: 10.0 Published: 2008-11-04 Modified: 2026-06-16

Description

The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.

Affected Platforms

Sun Java Web Start

Weakness Type

CWE-20, NVD-CWE-noinfo

References