CVE-2009-1104

The CVE-2009-1104 issue affects the Java Plug-in in JDK/JRE, specifically versions 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier. The root cause is that the Java Plug-in does not prevent Javascript loaded from localhost from connecting to other ports on the system v...

CVE-2005-2738

The CVE-2005-2738 entry concerns Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X, where multiple programs can open the same port via a Java ServerSocket. The underlying issue is that the runtime does not prevent port-sharing, allowing a local user to have a Java program intercept data intende...