CVE-2010-3563

This Metasploit module exploits CVE-2010-3563 in Java Web Start by overwriting the default sandbox policy file, allowing remote code execution. It serves malicious JNLP files and a JAR payload to bypass the Java sandbox.

This Metasploit module exploits CVE-2010-3563, a vulnerability in Java Web Start's BasicServiceImpl that allows sandbox escape by overwriting the default Java security policy file. It serves malicious JNLP files and a JAR payload to achieve remote code execution on vulnerable Java Runtime Environment versions prior to update 22.