The Microsoft Java Virtual Machine suffers from a cross-site communication vulnerability that allows Java applets originating from different domains to communicate.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33772/covert.txt
Source: https://packetstormsecurity.com/files/33772/covert.txt.html