9.3

CVE-2004-1029

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Java Sdk-rte Version 1.3 Edition hp-ux_pa-risc
Hp ≫ Java Sdk-rte Version 1.4 Edition hp-ux_pa-risc
Sun ≫ Jdk Version 1.3.1_01 Edition linux
Sun ≫ Jdk Version 1.3.1_01 Edition solaris
Sun ≫ Jdk Version 1.3.1_01a Edition windows
Sun ≫ Jdk Version 1.3.1_02 Edition linux
Sun ≫ Jdk Version 1.3.1_02 Edition solaris
Sun ≫ Jdk Version 1.3.1_02 Edition windows
Sun ≫ Jdk Version 1.3.1_03 Edition linux
Sun ≫ Jdk Version 1.3.1_03 Edition solaris
Sun ≫ Jdk Version 1.3.1_03 Edition windows
Sun ≫ Jdk Version 1.3.1_04 Edition windows
Sun ≫ Jdk Version 1.3.1_05 Edition linux
Sun ≫ Jdk Version 1.3.1_05 Edition solaris
Sun ≫ Jdk Version 1.3.1_05 Edition windows
Sun ≫ Jdk Version 1.3.1_06 Edition linux
Sun ≫ Jdk Version 1.3.1_06 Edition solaris
Sun ≫ Jdk Version 1.3.1_06 Edition windows
Sun ≫ Jdk Version 1.3.1_07 Edition linux
Sun ≫ Jdk Version 1.3.1_07 Edition solaris
Sun ≫ Jdk Version 1.3.1_07 Edition windows
Sun ≫ Jdk Version 1.4 Edition linux
Sun ≫ Jdk Version 1.4 Edition solaris
Sun ≫ Jdk Version 1.4 Edition windows
Sun ≫ Jdk Version 1.4.0_01 Edition windows
Sun ≫ Jdk Version 1.4.0_02 Edition linux
Sun ≫ Jdk Version 1.4.0_02 Edition solaris
Sun ≫ Jdk Version 1.4.0_02 Edition windows
Sun ≫ Jdk Version 1.4.0_03 Edition linux
Sun ≫ Jdk Version 1.4.0_03 Edition solaris
Sun ≫ Jdk Version 1.4.0_03 Edition windows
Sun ≫ Jdk Version 1.4.0_4 Edition linux
Sun ≫ Jdk Version 1.4.0_4 Edition solaris
Sun ≫ Jdk Version 1.4.0_4 Edition windows
Sun ≫ Jdk Version 1.4.1 Edition linux
Sun ≫ Jdk Version 1.4.1 Edition solaris
Sun ≫ Jdk Version 1.4.1 Edition windows
Sun ≫ Jdk Version 1.4.1_01 Edition linux
Sun ≫ Jdk Version 1.4.1_01 Edition solaris
Sun ≫ Jdk Version 1.4.1_01 Edition windows
Sun ≫ Jdk Version 1.4.1_02 Edition linux
Sun ≫ Jdk Version 1.4.1_02 Edition solaris
Sun ≫ Jdk Version 1.4.1_02 Edition windows
Sun ≫ Jdk Version 1.4.1_03 Edition linux
Sun ≫ Jdk Version 1.4.1_03 Edition solaris
Sun ≫ Jdk Version 1.4.1_03 Edition windows
Sun ≫ Jdk Version 1.4.2 Edition linux
Sun ≫ Jdk Version 1.4.2 Edition solaris
Sun ≫ Jdk Version 1.4.2 Edition windows
Sun ≫ Jdk Version 1.4.2_01 Edition linux
Sun ≫ Jdk Version 1.4.2_02 Edition linux
Sun ≫ Jdk Version 1.4.2_03 Edition linux
Sun ≫ Jdk Version 1.4.2_03 Edition solaris
Sun ≫ Jdk Version 1.4.2_03 Edition windows
Sun ≫ Jdk Version 1.4.2_04 Edition linux
Sun ≫ Jdk Version 1.4.2_04 Edition solaris
Sun ≫ Jdk Version 1.4.2_04 Edition windows
Sun ≫ Jdk Version 1.4.2_05 Edition linux
Sun ≫ Jdk Version 1.4.2_05 Edition solaris
Sun ≫ Jdk Version 1.4.2_05 Edition windows
Sun ≫ Jre Version 1.3.0 Edition linux
Sun ≫ Jre Version 1.3.0 Edition solaris
Sun ≫ Jre Version 1.3.0 Edition windows
Sun ≫ Jre Version 1.3.0 Update update1 Edition linux
Sun ≫ Jre Version 1.3.0 Update update2 Edition linux
Sun ≫ Jre Version 1.3.0 Update update2 Edition solaris
Sun ≫ Jre Version 1.3.0 Update update2 Edition windows
Sun ≫ Jre Version 1.3.0 Update update3 Edition linux
Sun ≫ Jre Version 1.3.0 Update update4 Edition linux
Sun ≫ Jre Version 1.3.0 Update update4 Edition windows
Sun ≫ Jre Version 1.3.0 Update update5 Edition linux
Sun ≫ Jre Version 1.3.0 Update update5 Edition solaris
Sun ≫ Jre Version 1.3.0 Update update5 Edition windows
Sun ≫ Jre Version 1.3.1 Edition linux
Sun ≫ Jre Version 1.3.1 Update update1 Edition linux
Sun ≫ Jre Version 1.3.1 Update update1 Edition solaris
Sun ≫ Jre Version 1.3.1 Update update1 Edition windows
Sun ≫ Jre Version 1.3.1 Update update1a Edition windows
Sun ≫ Jre Version 1.3.1 Update update4 Edition solaris
Sun ≫ Jre Version 1.3.1 Update update4 Edition windows
Sun ≫ Jre Version 1.3.1 Update update8 Edition linux
Sun ≫ Jre Version 1.3.1 Update update8 Edition solaris
Sun ≫ Jre Version 1.3.1 Update update8 Edition windows
Sun ≫ Jre Version 1.3.1_02 Edition linux
Sun ≫ Jre Version 1.3.1_02 Edition solaris
Sun ≫ Jre Version 1.3.1_02 Edition windows
Sun ≫ Jre Version 1.3.1_03 Edition linux
Sun ≫ Jre Version 1.3.1_03 Edition solaris
Sun ≫ Jre Version 1.3.1_03 Edition windows
Sun ≫ Jre Version 1.3.1_05 Edition linux
Sun ≫ Jre Version 1.3.1_05 Edition solaris
Sun ≫ Jre Version 1.3.1_05 Edition windows
Sun ≫ Jre Version 1.3.1_06 Edition linux
Sun ≫ Jre Version 1.3.1_06 Edition solaris
Sun ≫ Jre Version 1.3.1_06 Edition windows
Sun ≫ Jre Version 1.3.1_07 Edition linux
Sun ≫ Jre Version 1.3.1_07 Edition solaris
Sun ≫ Jre Version 1.3.1_07 Edition windows
Sun ≫ Jre Version 1.3.1_09 Edition linux
Sun ≫ Jre Version 1.3.1_09 Edition solaris
Sun ≫ Jre Version 1.3.1_09 Edition windows
Sun ≫ Jre Version 1.4 Edition linux
Sun ≫ Jre Version 1.4 Edition solaris
Sun ≫ Jre Version 1.4 Edition windows
Sun ≫ Jre Version 1.4.0_01 Edition solaris
Sun ≫ Jre Version 1.4.0_01 Edition windows
Sun ≫ Jre Version 1.4.0_02 Edition linux
Sun ≫ Jre Version 1.4.0_02 Edition solaris
Sun ≫ Jre Version 1.4.0_02 Edition windows
Sun ≫ Jre Version 1.4.0_03 Edition linux
Sun ≫ Jre Version 1.4.0_03 Edition solaris
Sun ≫ Jre Version 1.4.0_03 Edition windows
Sun ≫ Jre Version 1.4.0_04 Edition linux
Sun ≫ Jre Version 1.4.0_04 Edition solaris
Sun ≫ Jre Version 1.4.0_04 Edition windows
Sun ≫ Jre Version 1.4.1 Edition linux
Sun ≫ Jre Version 1.4.1 Edition solaris
Sun ≫ Jre Version 1.4.1 Edition windows
Sun ≫ Jre Version 1.4.1 Update update3 Edition linux
Sun ≫ Jre Version 1.4.1 Update update3 Edition solaris
Sun ≫ Jre Version 1.4.1 Update update3 Edition windows
Sun ≫ Jre Version 1.4.1_01 Edition linux
Sun ≫ Jre Version 1.4.1_01 Edition solaris
Sun ≫ Jre Version 1.4.1_01 Edition windows
Sun ≫ Jre Version 1.4.1_02 Edition linux
Sun ≫ Jre Version 1.4.1_02 Edition solaris
Sun ≫ Jre Version 1.4.1_02 Edition windows
Sun ≫ Jre Version 1.4.1_07 Edition windows
Sun ≫ Jre Version 1.4.2 Edition linux
Sun ≫ Jre Version 1.4.2 Edition solaris
Sun ≫ Jre Version 1.4.2 Edition windows
Sun ≫ Jre Version 1.4.2 Update update1 Edition linux
Sun ≫ Jre Version 1.4.2 Update update1 Edition solaris
Sun ≫ Jre Version 1.4.2 Update update1 Edition windows
Sun ≫ Jre Version 1.4.2 Update update2 Edition linux
Sun ≫ Jre Version 1.4.2 Update update2 Edition solaris
Sun ≫ Jre Version 1.4.2 Update update2 Edition windows
Sun ≫ Jre Version 1.4.2 Update update3 Edition linux
Sun ≫ Jre Version 1.4.2 Update update3 Edition solaris
Sun ≫ Jre Version 1.4.2 Update update3 Edition windows
Sun ≫ Jre Version 1.4.2 Update update4 Edition linux
Sun ≫ Jre Version 1.4.2 Update update4 Edition solaris
Sun ≫ Jre Version 1.4.2 Update update4 Edition windows
Sun ≫ Jre Version 1.4.2 Update update5 Edition linux
Sun ≫ Jre Version 1.4.2 Update update5 Edition solaris
Sun ≫ Jre Version 1.4.2 Update update5 Edition windows
Symantec ≫ Enterprise Firewall Version 8.0
Symantec ≫ Enterprise Firewall Version 8.0 Edition solaris
Symantec ≫ Enterprise Firewall Version 8.0 Edition windows_2000_nt
Conectiva ≫ Linux Version 10.0
Hp ≫ Hp-ux Version 11.00
Hp ≫ Hp-ux Version 11.11
Hp ≫ Hp-ux Version 11.22
Hp ≫ Hp-ux Version 11.23 Edition ia64_64-bit
Symantec ≫ Gateway Security 5400 Version 2.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 17.02% 0.967
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://jouko.iki.fi/adv/javaplugin.html
http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html
http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html
http://secunia.com/advisories/13271
Vendor Advisory
http://secunia.com/advisories/29035
Vendor Advisory
http://securityreason.com/securityalert/61
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21257249
http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities
http://www.kb.cert.org/vuls/id/760344
US Government Resource
http://www.securityfocus.com/bid/12317
Patch
http://www.vupen.com/english/advisories/2008/0599
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18188
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674