CVEvulnerability

CVE-2004-1145

5.0 MEDIUM Published 2004-12-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.

Affected configurations

• ethereal group ethereal 0.9 • ethereal group ethereal 0.9.1 • ethereal group ethereal 0.9.2 • ethereal group ethereal 0.9.3 • ethereal group ethereal 0.9.4 • ethereal group ethereal 0.9.5 • ethereal group ethereal 0.9.6 • ethereal group ethereal 0.9.7 • ethereal group ethereal 0.9.8 • ethereal group ethereal 0.9.9 • ethereal group ethereal 0.9.10 • ethereal group ethereal 0.9.11 • ethereal group ethereal 0.9.12 • ethereal group ethereal 0.9.13 • ethereal group ethereal 0.9.14 • ethereal group ethereal 0.9.15 • ethereal group ethereal 0.9.16 • ethereal group ethereal 0.10 • ethereal group ethereal 0.10.1 • ethereal group ethereal 0.10.2 • ethereal group ethereal 0.10.3 • ethereal group ethereal 0.10.4 • ethereal group ethereal 0.10.5 • ethereal group ethereal 0.10.6 • ethereal group ethereal 0.10.7 • sgi propack 3.0 • conectiva linux 9.0 • conectiva linux 10.0 • altlinux alt linux 2.3 • debian debian linux 3.0 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat linux advanced workstation 2.1 • suse suse linux 8.0 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2

References