CVE-2010-1423

This Metasploit module exploits CVE-2010-1423 by leveraging improper validation of command-line arguments in Sun Java Web Start. It uses the -J and -XXaltjvm options to execute arbitrary code via a malicious JNLP file served over HTTP, targeting Windows systems with WebDAV Mini-Redirector enabled.

This Metasploit module exploits CVE-2010-1423 by leveraging the -J and -XXaltjvm options in Java Web Start to inject arbitrary command-line arguments, leading to remote code execution. It uses a combination of HTTP server functionality and WebDAV Mini-Redirector to deliver a malicious DLL payload.