CVE-2004-1029

EPSS 42.56%
Published 01.03.2005 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

Affected products Warnungen 0 Metrics 2 CWE 0 References 18

Data is provided by the National Vulnerability Database (NVD)

Hp ≫ Java Sdk-rte Version1.3 Editionhp-ux_pa-risc

Hp ≫ Java Sdk-rte Version1.4 Editionhp-ux_pa-risc

Sun ≫ Jdk Version1.3.1_01 Editionlinux

Sun ≫ Jdk Version1.3.1_01 Editionsolaris

Sun ≫ Jdk Version1.3.1_01a Editionwindows

Sun ≫ Jdk Version1.3.1_02 Editionlinux

Sun ≫ Jdk Version1.3.1_02 Editionsolaris

Sun ≫ Jdk Version1.3.1_02 Editionwindows

Sun ≫ Jdk Version1.3.1_03 Editionlinux

Sun ≫ Jdk Version1.3.1_03 Editionsolaris

Sun ≫ Jdk Version1.3.1_03 Editionwindows

Sun ≫ Jdk Version1.3.1_04 Editionwindows

Sun ≫ Jdk Version1.3.1_05 Editionlinux

Sun ≫ Jdk Version1.3.1_05 Editionsolaris

Sun ≫ Jdk Version1.3.1_05 Editionwindows

Sun ≫ Jdk Version1.3.1_06 Editionlinux

Sun ≫ Jdk Version1.3.1_06 Editionsolaris

Sun ≫ Jdk Version1.3.1_06 Editionwindows

Sun ≫ Jdk Version1.3.1_07 Editionlinux

Sun ≫ Jdk Version1.3.1_07 Editionsolaris

Sun ≫ Jdk Version1.3.1_07 Editionwindows

Sun ≫ Jdk Version1.4 Editionlinux

Sun ≫ Jdk Version1.4 Editionsolaris

Sun ≫ Jdk Version1.4 Editionwindows

Sun ≫ Jdk Version1.4.0_01 Editionwindows

Sun ≫ Jdk Version1.4.0_02 Editionlinux

Sun ≫ Jdk Version1.4.0_02 Editionsolaris

Sun ≫ Jdk Version1.4.0_02 Editionwindows

Sun ≫ Jdk Version1.4.0_03 Editionlinux

Sun ≫ Jdk Version1.4.0_03 Editionsolaris

Sun ≫ Jdk Version1.4.0_03 Editionwindows

Sun ≫ Jdk Version1.4.0_4 Editionlinux

Sun ≫ Jdk Version1.4.0_4 Editionsolaris

Sun ≫ Jdk Version1.4.0_4 Editionwindows

Sun ≫ Jdk Version1.4.1 Editionlinux

Sun ≫ Jdk Version1.4.1 Editionsolaris

Sun ≫ Jdk Version1.4.1 Editionwindows

Sun ≫ Jdk Version1.4.1_01 Editionlinux

Sun ≫ Jdk Version1.4.1_01 Editionsolaris

Sun ≫ Jdk Version1.4.1_01 Editionwindows

Sun ≫ Jdk Version1.4.1_02 Editionlinux

Sun ≫ Jdk Version1.4.1_02 Editionsolaris

Sun ≫ Jdk Version1.4.1_02 Editionwindows

Sun ≫ Jdk Version1.4.1_03 Editionlinux

Sun ≫ Jdk Version1.4.1_03 Editionsolaris

Sun ≫ Jdk Version1.4.1_03 Editionwindows

Sun ≫ Jdk Version1.4.2 Editionlinux

Sun ≫ Jdk Version1.4.2 Editionsolaris

Sun ≫ Jdk Version1.4.2 Editionwindows

Sun ≫ Jdk Version1.4.2_01 Editionlinux

Sun ≫ Jdk Version1.4.2_02 Editionlinux

Sun ≫ Jdk Version1.4.2_03 Editionlinux

Sun ≫ Jdk Version1.4.2_03 Editionsolaris

Sun ≫ Jdk Version1.4.2_03 Editionwindows

Sun ≫ Jdk Version1.4.2_04 Editionlinux

Sun ≫ Jdk Version1.4.2_04 Editionsolaris

Sun ≫ Jdk Version1.4.2_04 Editionwindows

Sun ≫ Jdk Version1.4.2_05 Editionlinux

Sun ≫ Jdk Version1.4.2_05 Editionsolaris

Sun ≫ Jdk Version1.4.2_05 Editionwindows

Sun ≫ Jre Version1.3.0 Editionlinux

Sun ≫ Jre Version1.3.0 Editionsolaris

Sun ≫ Jre Version1.3.0 Editionwindows

Sun ≫ Jre Version1.3.0 Updateupdate1 Editionlinux

Sun ≫ Jre Version1.3.0 Updateupdate2 Editionlinux

Sun ≫ Jre Version1.3.0 Updateupdate2 Editionsolaris

Sun ≫ Jre Version1.3.0 Updateupdate2 Editionwindows

Sun ≫ Jre Version1.3.0 Updateupdate3 Editionlinux

Sun ≫ Jre Version1.3.0 Updateupdate4 Editionlinux

Sun ≫ Jre Version1.3.0 Updateupdate4 Editionwindows

Sun ≫ Jre Version1.3.0 Updateupdate5 Editionlinux

Sun ≫ Jre Version1.3.0 Updateupdate5 Editionsolaris

Sun ≫ Jre Version1.3.0 Updateupdate5 Editionwindows

Sun ≫ Jre Version1.3.1 Editionlinux

Sun ≫ Jre Version1.3.1 Updateupdate1 Editionlinux

Sun ≫ Jre Version1.3.1 Updateupdate1 Editionsolaris

Sun ≫ Jre Version1.3.1 Updateupdate1 Editionwindows

Sun ≫ Jre Version1.3.1 Updateupdate1a Editionwindows

Sun ≫ Jre Version1.3.1 Updateupdate4 Editionsolaris

Sun ≫ Jre Version1.3.1 Updateupdate4 Editionwindows

Sun ≫ Jre Version1.3.1 Updateupdate8 Editionlinux

Sun ≫ Jre Version1.3.1 Updateupdate8 Editionsolaris

Sun ≫ Jre Version1.3.1 Updateupdate8 Editionwindows

Sun ≫ Jre Version1.3.1_02 Editionlinux

Sun ≫ Jre Version1.3.1_02 Editionsolaris

Sun ≫ Jre Version1.3.1_02 Editionwindows

Sun ≫ Jre Version1.3.1_03 Editionlinux

Sun ≫ Jre Version1.3.1_03 Editionsolaris

Sun ≫ Jre Version1.3.1_03 Editionwindows

Sun ≫ Jre Version1.3.1_05 Editionlinux

Sun ≫ Jre Version1.3.1_05 Editionsolaris

Sun ≫ Jre Version1.3.1_05 Editionwindows

Sun ≫ Jre Version1.3.1_06 Editionlinux

Sun ≫ Jre Version1.3.1_06 Editionsolaris

Sun ≫ Jre Version1.3.1_06 Editionwindows

Sun ≫ Jre Version1.3.1_07 Editionlinux

Sun ≫ Jre Version1.3.1_07 Editionsolaris

Sun ≫ Jre Version1.3.1_07 Editionwindows

Sun ≫ Jre Version1.3.1_09 Editionlinux

Sun ≫ Jre Version1.3.1_09 Editionsolaris

Sun ≫ Jre Version1.3.1_09 Editionwindows

Sun ≫ Jre Version1.4 Editionlinux

Sun ≫ Jre Version1.4 Editionsolaris

Sun ≫ Jre Version1.4 Editionwindows

Sun ≫ Jre Version1.4.0_01 Editionsolaris

Sun ≫ Jre Version1.4.0_01 Editionwindows

Sun ≫ Jre Version1.4.0_02 Editionlinux

Sun ≫ Jre Version1.4.0_02 Editionsolaris

Sun ≫ Jre Version1.4.0_02 Editionwindows

Sun ≫ Jre Version1.4.0_03 Editionlinux

Sun ≫ Jre Version1.4.0_03 Editionsolaris

Sun ≫ Jre Version1.4.0_03 Editionwindows

Sun ≫ Jre Version1.4.0_04 Editionlinux

Sun ≫ Jre Version1.4.0_04 Editionsolaris

Sun ≫ Jre Version1.4.0_04 Editionwindows

Sun ≫ Jre Version1.4.1 Editionlinux

Sun ≫ Jre Version1.4.1 Editionsolaris

Sun ≫ Jre Version1.4.1 Editionwindows

Sun ≫ Jre Version1.4.1 Updateupdate3 Editionlinux

Sun ≫ Jre Version1.4.1 Updateupdate3 Editionsolaris

Sun ≫ Jre Version1.4.1 Updateupdate3 Editionwindows

Sun ≫ Jre Version1.4.1_01 Editionlinux

Sun ≫ Jre Version1.4.1_01 Editionsolaris

Sun ≫ Jre Version1.4.1_01 Editionwindows

Sun ≫ Jre Version1.4.1_02 Editionlinux

Sun ≫ Jre Version1.4.1_02 Editionsolaris

Sun ≫ Jre Version1.4.1_02 Editionwindows

Sun ≫ Jre Version1.4.1_07 Editionwindows

Sun ≫ Jre Version1.4.2 Editionlinux

Sun ≫ Jre Version1.4.2 Editionsolaris

Sun ≫ Jre Version1.4.2 Editionwindows

Sun ≫ Jre Version1.4.2 Updateupdate1 Editionlinux

Sun ≫ Jre Version1.4.2 Updateupdate1 Editionsolaris

Sun ≫ Jre Version1.4.2 Updateupdate1 Editionwindows

Sun ≫ Jre Version1.4.2 Updateupdate2 Editionlinux

Sun ≫ Jre Version1.4.2 Updateupdate2 Editionsolaris

Sun ≫ Jre Version1.4.2 Updateupdate2 Editionwindows

Sun ≫ Jre Version1.4.2 Updateupdate3 Editionlinux

Sun ≫ Jre Version1.4.2 Updateupdate3 Editionsolaris

Sun ≫ Jre Version1.4.2 Updateupdate3 Editionwindows

Sun ≫ Jre Version1.4.2 Updateupdate4 Editionlinux

Sun ≫ Jre Version1.4.2 Updateupdate4 Editionsolaris

Sun ≫ Jre Version1.4.2 Updateupdate4 Editionwindows

Sun ≫ Jre Version1.4.2 Updateupdate5 Editionlinux

Sun ≫ Jre Version1.4.2 Updateupdate5 Editionsolaris

Sun ≫ Jre Version1.4.2 Updateupdate5 Editionwindows

Symantec ≫ Enterprise Firewall Version8.0

Symantec ≫ Enterprise Firewall Version8.0 Editionsolaris

Symantec ≫ Enterprise Firewall Version8.0 Editionwindows_2000_nt

Conectiva ≫ Linux Version10.0

Gentoo ≫ Linux

Hp ≫ Hp-ux Version11.00

Hp ≫ Hp-ux Version11.11

Hp ≫ Hp-ux Version11.22

Hp ≫ Hp-ux Version11.23 Editionia64_64-bit

Symantec ≫ Gateway Security 5400 Version2.0

Symantec ≫ Gateway Security 5400 Version2.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	42.56%	0.973

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://jouko.iki.fi/adv/javaplugin.html

http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html

http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html

http://secunia.com/advisories/13271

Vendor Advisory

http://secunia.com/advisories/29035

Vendor Advisory

http://securityreason.com/securityalert/61

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1

Patch

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1

Patch

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg21257249

http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities

http://www.kb.cert.org/vuls/id/760344

US Government Resource

http://www.securityfocus.com/bid/12317

Patch

http://www.vupen.com/english/advisories/2008/0599

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18188

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674

https://nvd.nist.gov/vuln/detail/CVE-2004-1029

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1029

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1029

EUVD