CVE-2004-1029
N/A
N/A
Summary
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities
- http://jouko.iki.fi/adv/javaplugin.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674
- http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html
- http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html
- http://secunia.com/advisories/13271
- http://secunia.com/advisories/29035
- http://securityreason.com/securityalert/61
- http://www.securityfocus.com/bid/12317
- http://www.vupen.com/english/advisories/2008/0599
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18188
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1
- http://www.kb.cert.org/vuls/id/760344
- http://www-1.ibm.com/support/docview.wss?uid=swg21257249
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1
References
- http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities
- http://jouko.iki.fi/adv/javaplugin.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674
- http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html
- http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html
- http://secunia.com/advisories/13271
- http://secunia.com/advisories/29035
- http://securityreason.com/securityalert/61
- http://www.securityfocus.com/bid/12317
- http://www.vupen.com/english/advisories/2008/0599
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18188
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1
- http://www.kb.cert.org/vuls/id/760344
- http://www-1.ibm.com/support/docview.wss?uid=swg21257249
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.