10
CVE-2004-2764
- EPSS 2.36%
- Veröffentlicht 02.06.2009 10:30:00
- Zuletzt bearbeitet 16.06.2026 22:10:18
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.36% | 0.816 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html
http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d
http://secunia.com/advisories/12206
http://securitytracker.com/id?1011661
http://www.osvdb.org/8288
http://www.securityfocus.com/archive/1/371208
http://www.securityfocus.com/bid/10844
https://exchange.xforce.ibmcloud.com/vulnerabilities/16864