CVE:CVE-2008-3638
CNNVD:CNNVD-200809-364
Apple Mac OS X 10.5.4 和 10.5.5的Java不阻止applets访问file:// URLs, 远程攻击者可以执行任意程序。
solution:Upgrade apple mac_os_x to a higher version than 10.5.4,10.5.5,and avoid the version 10.5.4,10.5.5; Upgrade apple mac_os_x_server to a higher version than 10.5.4,10.5.5,and avoid the version 10.5.4,10.5.5