Launchpad.net

CVE 2010-2783

IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.

See the CVE page on Mitre.org for more details.