On 24/03/2017 12:01, Peter Levart wrote:


:

Just a reminder that System.err field is "writable" and therefore System.setErr(PrintStream) can be used to redirect output to execute arbitrary code...
That's right, it needs to captured at startup or sent directly to stderr.

-Alan

Reply via email to