VDB
CVE-2004-1029
CVE-2004-1029
PUBLISHED
CVSS 9.300000190734863 CRITICAL
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
EPSS 37.03% · 97.3th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
37.03%
97.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| hp | hp-ux | 11.00, 11.11, 11.22 |
| symantec | gateway_security_5400 | 2.0, 2.0.1 |
| sun | jre | 1.3.0, 1.3.0, 1.3.1 |
| gentoo | linux | |
| sun | jdk | 1.4.2_04, *, * |
| conectiva | linux | 10.0 |
| symantec | enterprise_firewall | 8.0, 8.0, 8.0 |
| hp | java_sdk-rte | 1.3, 1.4 |
| n/a | n/a | n/a |
Timeline
- CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 16, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- http://secunia.com/advisories/29035 advisory
- 13271 third-party-advisory
- 20041122 Sun Java Plugin Arbitrary Package Access Vulnerability third-party-advisory
- http://jouko.iki.fi/adv/javaplugin.html url
- oval:org.mitre.oval:def:5674 vdb
- APPLE-SA-2005-02-22 vendor-advisory
- http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html url
- 61 third-party-advisory
- 12317 vdb
- ADV-2008-0599 vdb
- sdk-jre-applet-restriction-bypass(18188) vdb
- 101523 vendor-advisory
- VU#760344 third-party-advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21257249 url
- 57591 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-1029 advisory