CVE-2008-4910
The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.
Date published : 2008-11-03
http://www.securityfocus.com/bid/31916
http://www.securityfocus.com/archive/1/497799/100/0/threaded
