|CVSS SCORE||4.6, (AV:L/AC:L/Au:N/C:P/I:P/A:P)|
The specific flaw exists within the handling of paths within jp2launcher.exe. The issue lies in assumptions made in preparation for the call to java.exe. An attacker can leverage this vulnerability to execute code as the current user with medium integrity.
Oracle has issued an update to correct this vulnerability. More details can be found at:
|CREDIT||Yuki Chen of Qihoo