TUCoPS :: Web :: Apps

TUCoPS :: Web :: Apps :: va1999.htm
Sun Java AWT Library Sandbox Violation Vulnerability
ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability
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