CVEvulnerability
CVE-2004-1029
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-03-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
Affected configurations
• hp java sdk-rte 1.3
• hp java sdk-rte 1.4
• sun jdk 1.3.1 01
• sun jdk 1.3.1 01a
• sun jdk 1.3.1 02
• sun jdk 1.3.1 03
• sun jdk 1.3.1 04
• sun jdk 1.3.1 05
• sun jdk 1.3.1 06
• sun jdk 1.3.1 07
• sun jdk 1.4
• sun jdk 1.4.0 01
• sun jdk 1.4.0 02
• sun jdk 1.4.0 03
• sun jdk 1.4.0 4
• sun jdk 1.4.1
• sun jdk 1.4.1 01
• sun jdk 1.4.1 02
• sun jdk 1.4.1 03
• sun jdk 1.4.2
• sun jdk 1.4.2 01
• sun jdk 1.4.2 02
• sun jdk 1.4.2 03
• sun jdk 1.4.2 04
• sun jdk 1.4.2 05
• sun jre 1.3.0
• sun jre 1.3.1
• sun jre 1.3.1 02
• sun jre 1.3.1 03
• sun jre 1.3.1 05
• sun jre 1.3.1 06
• sun jre 1.3.1 07
• sun jre 1.3.1 09
• sun jre 1.4
• sun jre 1.4.0 01
• sun jre 1.4.0 02
• sun jre 1.4.0 03
• sun jre 1.4.0 04
• sun jre 1.4.1
• sun jre 1.4.1 01
• sun jre 1.4.1 02
• sun jre 1.4.1 07
• sun jre 1.4.2
• symantec enterprise firewall 8.0
• conectiva linux 10.0
• gentoo linux
• hp hp-ux 11.00
• hp hp-ux 11.11
• hp hp-ux 11.22
• hp hp-ux 11.23
• symantec gateway security 5400 2.0
• symantec gateway security 5400 2.0.1
Related
Weakness · not in database (1)
References
- http://jouko.iki.fi/adv/javaplugin.html jouko.iki.fi
- http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html lists.apple.com
- http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html rpmfind.net
- http://secunia.com/advisories/13271 Vendor Advisory
- http://secunia.com/advisories/29035 Vendor Advisory
- http://securityreason.com/securityalert/61 securityreason.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21257249 www-1.ibm.com
- http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities www.idefense.com
- http://www.kb.cert.org/vuls/id/760344 US Government Resource
- http://www.securityfocus.com/bid/12317 Patch
- http://www.vupen.com/english/advisories/2008/0599 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18188 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674 oval.cisecurity.org
- http://jouko.iki.fi/adv/javaplugin.html jouko.iki.fi
- http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html lists.apple.com
- http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html rpmfind.net
- http://secunia.com/advisories/13271 Vendor Advisory
- http://secunia.com/advisories/29035 Vendor Advisory
- http://securityreason.com/securityalert/61 securityreason.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21257249 www-1.ibm.com
- http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities www.idefense.com
- http://www.kb.cert.org/vuls/id/760344 US Government Resource
- http://www.securityfocus.com/bid/12317 Patch
- http://www.vupen.com/english/advisories/2008/0599 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18188 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674 oval.cisecurity.org