new bug in Netscape

[Ian Taylor]

there is new bug reported in netscape that allows java applets to view the
contents of a users hard drive. the functions used are netscape.net.urlconnection
and netscape.net.urlinputstream. I am unable to find information on these
functions anywhere. Does anybody know about this, what do they do, what
can they do. Any information would be appreciated.

P.S. I am asking this information not to exploit this bug but for protection.

cheers
ian

[Gautam]

A similar bug is reported in IE 5.0 as well. WE are trying to find a remedy.
Will keep you posted.
Cheers




"Ian Taylor" <itaylor78@yahoo.com> wrote:
>
>there is new bug reported in netscape that allows java applets to view the
>contents of a users hard drive. the functions used are netscape.net.urlconnection
>and netscape.net.urlinputstream. I am unable to find information on these
>functions anywhere. Does anybody know about this, what do they do, what
>can they do. Any information would be appreciated.
>
>P.S. I am asking this information not to exploit this bug but for protection.
>
>cheers
>ian