Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2011-10-12 02:52
Updated : 2024-02-04 17:54
NVD link : CVE-2011-1969
Mitre link : CVE-2011-1969
CVE.ORG link : CVE-2011-1969
JSON object : View
Products Affected
microsoft
- forefront_unified_access_gateway
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')