jdk/jre -- Security Vulnerability With Java Plugin

2004-11-2400:00:00

vuxml.freebsd.org

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.192 Low

EPSS

Percentile

96.3%

JSON

The Sun Java Plugin capability in Java 2 Runtime Environment
(JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does
not properly restrict access between Javascript and Java
applets during data transfer, which allows remote attackers to
load unsafe classes and execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjdk= 1.4.0UNKNOWN
FreeBSDanynoarchjdk<= 1.4.2p6_6UNKNOWN
FreeBSDanynoarchlinux-jdk= 1.4.0UNKNOWN
FreeBSDanynoarchlinux-jdk<= 1.4.2.05UNKNOWN
FreeBSDanynoarchlinux-sun-jdk= 1.4.0UNKNOWN
FreeBSDanynoarchlinux-sun-jdk<= 1.4.2.05UNKNOWN
FreeBSDanynoarchlinux-blackdown-jdk= 1.3.0UNKNOWN
FreeBSDanynoarchlinux-blackdown-jdk<= 1.4.2UNKNOWN
FreeBSDanynoarchlinux-ibm-jdk= 1.3.0UNKNOWN
FreeBSDanynoarchlinux-ibm-jdk<= 1.4.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	jdk	= 1.4.0	UNKNOWN
FreeBSD	any	noarch	jdk	<= 1.4.2p6_6	UNKNOWN
FreeBSD	any	noarch	linux-jdk	= 1.4.0	UNKNOWN
FreeBSD	any	noarch	linux-jdk	<= 1.4.2.05	UNKNOWN
FreeBSD	any	noarch	linux-sun-jdk	= 1.4.0	UNKNOWN
FreeBSD	any	noarch	linux-sun-jdk	<= 1.4.2.05	UNKNOWN
FreeBSD	any	noarch	linux-blackdown-jdk	= 1.3.0	UNKNOWN
FreeBSD	any	noarch	linux-blackdown-jdk	<= 1.4.2	UNKNOWN
FreeBSD	any	noarch	linux-ibm-jdk	= 1.3.0	UNKNOWN
FreeBSD	any	noarch	linux-ibm-jdk	<= 1.4.2	UNKNOWN