Description
Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 sun.plugin2.applet.Applet2ClassLoader类的findClass方法中存在漏洞，由于没有正确验证可疑程序提供的URL，可能会在Windows 32位和64位以及Linux 32位上以SYSTEM权限执行任意代码。
Oracle Java 'Applet2ClassLoader'类未签名Applet远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://dun.163.com/news/p/2ed957123fa841b68ec06ecb5d853112
https://cloud.tencent.com/developer/article/2168994
https://www.zerodayinitiative.com/advisories/zdi-11-084/
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=24151
https://www.exploit-db.com/exploits/16990
https://fhoguin.com/2011/03/oracle-java-unsigned-applet-applet2classloader-remote-code-execution-vulnerability-zdi-11-084-explained/
https://cve.imfht.com/analysis-public/CVE-2010-4452?lang=en
http://slightlyrandombrokenthoughts.blogspot.com/2011/03/oracle-java-applet-clipboard-injection.html