Sun

Java Plug-in

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2005-4845

  • EPSS 0.52%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the contr...

6.8

CVE-2003-1516

Exploit
  • EPSS 2.85%
  • Published 31.12.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a sign...

6.4

CVE-2003-1521

Exploit
  • EPSS 2.05%
  • Published 31.12.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.

7.5

CVE-2001-1008

Exploit
  • EPSS 0.63%
  • Published 31.08.2001 04:00:00
  • Last modified 03.04.2025 01:03:51

Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.