CVEvulnerability
CVE-2004-2764
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."
Affected configurations
• sun jre 1.4.0
• sun jre 1.4.0 01
• sun jre 1.4.0 02
• sun jre 1.4.0 03
• sun jre 1.4.0 04
• sun jre 1.4.1
• sun jre 1.4.1 01
• sun jre 1.4.1 02
• sun jre 1.4.1 03
• sun jre 1.4.1 04
• sun jre 1.4.1 05
• sun jre 1.4.1 06
• sun jre 1.4.1 07
• sun jre 1.4.2
• sun jre 1.4.2 01
• sun jre 1.4.2 1
• sun jre 1.4.2 2
• sun jre 1.4.2 02
• sun jre 1.4.2 03
• sun jre 1.4.2 3
• sun jre 1.4.2 4
• sun jre 1.4.2 04
• sun jre 1.4.2 5
• sun jre 1.4.2 6
• sun jre 1.4.2 7
• sun jre 1.4.2 8
• sun jre 1.4.2 9
• sun jre 1.4.2 10
• sun jre 1.4.2 11
• sun jre 1.4.2 12
• sun jre 1.4.2 13
• sun jre 1.4.2 14
• sun jre 1.4.2 15
• sun jre 1.4.2 21
• sun sdk 1.4.0
• sun sdk 1.4.0 01
• sun sdk 1.4.0 02
• sun sdk 1.4.0 03
• sun sdk 1.4.0 04
• sun sdk 1.4.1
• sun sdk 1.4.1 01
• sun sdk 1.4.1 02
• sun sdk 1.4.1 03
• sun sdk 1.4.1 04
• sun sdk 1.4.1 05
• sun sdk 1.4.1 06
• sun sdk 1.4.1 07
• sun sdk 1.4.2
• sun sdk 1.4.2 01
• sun sdk 1.4.2 02
• sun sdk 1.4.2 03
• sun sdk 1.4.2 04
Related
Weakness · not in database (1)
References
- http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html archive.cert.uni-stuttgart.de
- http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d groups.google.com
- http://secunia.com/advisories/12206 Vendor Advisory
- http://securitytracker.com/id?1011661 securitytracker.com
- http://www.osvdb.org/8288 www.osvdb.org
- http://www.securityfocus.com/archive/1/371208 www.securityfocus.com
- http://www.securityfocus.com/bid/10844 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16864 exchange.xforce.ibmcloud.com
- http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html archive.cert.uni-stuttgart.de
- http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d groups.google.com
- http://secunia.com/advisories/12206 Vendor Advisory
- http://securitytracker.com/id?1011661 securitytracker.com
- http://www.osvdb.org/8288 www.osvdb.org
- http://www.securityfocus.com/archive/1/371208 www.securityfocus.com
- http://www.securityfocus.com/bid/10844 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16864 exchange.xforce.ibmcloud.com