CVE-2004-1029
First published: Wed Nov 24 2004(Updated: )
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun JRE | =1.4.0_02 | |
| Sun JRE | =1.3.1_06 | |
| Symantec Enterprise Firewall | =8.0 | |
| Sun JRE | =1.3.1_03 | |
| Sun JRE | =1.4.0_04 | |
| Sun JDK | =1.4.0_4 | |
| Sun JDK | =1.3.1_06 | |
| Sun JDK | =1.4.1_03 | |
| Sun JRE | =1.4.2-update2 | |
| Sun JDK | =1.4.2_05 | |
| Sun JDK | =1.4.0_02 | |
| Sun JRE | =1.4.0_01 | |
| Sun JDK | =1.4.2 | |
| Sun JDK | =1.4.2 | |
| Sun JRE | =1.4.2-update5 | |
| Sun JDK | =1.3.1_02 | |
| Sun JRE | =1.4.0_01 | |
| Sun JRE | =1.4.2-update3 | |
| Sun JDK | =1.3.1_01 | |
| Sun JDK | =1.3.1_02 | |
| Sun JRE | =1.4.1 | |
| Sun JDK | =1.4.0_03 | |
| Sun JRE | =1.3.1_07 | |
| Symantec Enterprise Firewall | =8.0 | |
| Sun JDK | =1.3.1_03 | |
| Sun JRE | =1.4.2-update4 | |
| Sun JRE | =1.3.1_06 | |
| Sun JDK | =1.4.1_02 | |
| Sun JDK | =1.3.1_07 | |
| Sun JDK | =1.4 | |
| Sun JRE | =1.3.1-update1 | |
| Sun JRE | =1.4.0_03 | |
| Sun JDK | =1.3.1_03 | |
| Sun JRE | =1.4.1_02 | |
| Sun JRE | =1.4.1-update3 | |
| Sun JRE | =1.4.1_02 | |
| Sun JRE | =1.4 | |
| Sun JRE | =1.4.1_01 | |
| Sun JRE | =1.4.0_04 | |
| Sun JDK | =1.4.2_01 | |
| Sun JRE | =1.4.2-update3 | |
| Sun JDK | =1.3.1_05 | |
| Sun JDK | =1.4.2_04 | |
| Sun JDK | =1.3.1_02 | |
| Sun JDK | =1.4.1_02 | |
| Sun JRE | =1.3.1-update4 | |
| Sun JRE | =1.4.2-update5 | |
| Sun JRE | =1.3.1_05 | |
| Sun JRE | =1.3.1-update4 | |
| Sun JDK | =1.4.1 | |
| Sun JRE | =1.4.1_01 | |
| Sun JDK | =1.4.2 | |
| Sun JRE | =1.4 | |
| Sun JDK | =1.3.1_07 | |
| Sun JRE | =1.3.1-update1a | |
| Sun JRE | =1.4.2-update1 | |
| Sun JDK | =1.3.1_03 | |
| Sun JRE | =1.3.0 | |
| Sun JRE | =1.3.1_03 | |
| Sun JDK | =1.4.2_03 | |
| Sun JDK | =1.4.2_03 | |
| Sun JRE | =1.4.0_03 | |
| Sun JRE | =1.4.0_02 | |
| Sun JRE | =1.4.2-update3 | |
| Sun JRE | =1.3.1-update1 | |
| Sun JRE | =1.4.2-update1 | |
| Sun JDK | =1.3.1_06 | |
| Sun JDK | =1.4.0_01 | |
| Sun JRE | =1.4.1 | |
| Sun JRE | =1.3.0-update5 | |
| Sun JDK | =1.4.1_01 | |
| Sun JDK | =1.4 | |
| Sun JDK | =1.4.0_03 | |
| Sun JDK | =1.3.1_05 | |
| Symantec Enterprise Firewall | =8.0 | |
| Sun JDK | =1.4.0_02 | |
| Sun JDK | =1.4.1_01 | |
| Sun JDK | =1.3.1_07 | |
| Sun JRE | =1.3.0-update2 | |
| Sun JRE | =1.3.1_02 | |
| Sun JRE | =1.4.2-update1 | |
| Sun JRE | =1.4.1-update3 | |
| Sun JDK | =1.4.1_03 | |
| Sun JRE | =1.3.1-update8 | |
| Sun JDK | =1.3.1_01a | |
| Sun JRE | =1.3.0 | |
| Sun JRE | =1.3.1 | |
| Sun JRE | =1.3.1-update1 | |
| Sun JDK | =1.4.0_03 | |
| Sun JRE | =1.3.1_09 | |
| Sun JRE | =1.3.1-update8 | |
| Sun JRE | =1.3.1_07 | |
| Sun JRE | =1.4.1_01 | |
| Sun JDK | =1.4.2_04 | |
| Sun JDK | =1.4.2_05 | |
| Sun JRE | =1.4.2 | |
| Sun JRE | =1.4.2-update4 | |
| Sun JRE | =1.4.2-update2 | |
| Sun JRE | =1.3.1_07 | |
| Sun JRE | =1.3.1_09 | |
| Sun JDK | =1.4.2_04 | |
| Sun JDK | =1.4.0_4 | |
| Sun JRE | =1.4.2 | |
| Sun JRE | =1.3.0-update4 | |
| Sun JRE | =1.3.0-update3 | |
| Hp Java Sdk-rte | =1.4 | |
| Sun JRE | =1.4.2-update4 | |
| Sun JRE | =1.3.1_06 | |
| Sun JDK | =1.4.1_03 | |
| Sun JDK | =1.3.1_04 | |
| Sun JDK | =1.3.1_05 | |
| Sun JDK | =1.4.1 | |
| Sun JDK | =1.4.0_4 | |
| Sun JRE | =1.3.1_02 | |
| Sun JRE | =1.4.2 | |
| Sun JRE | =1.3.1_02 | |
| Sun JRE | =1.4.2-update5 | |
| Sun JDK | =1.4.1 | |
| Sun JDK | =1.4.2_02 | |
| Sun JRE | =1.3.0-update5 | |
| Sun JRE | =1.3.0-update2 | |
| Sun JRE | =1.4.0_04 | |
| Sun JRE | =1.3.0-update5 | |
| Sun JRE | =1.3.1_05 | |
| Sun JRE | =1.4 | |
| Sun JDK | =1.3.1_06 | |
| Sun JRE | =1.4.0_03 | |
| Sun JRE | =1.3.0-update1 | |
| Sun JDK | =1.4.2_03 | |
| Sun JDK | =1.4.1_02 | |
| Conectiva Linux | =10.0 | |
| Sun JRE | =1.4.1_02 | |
| Sun JRE | =1.3.0-update2 | |
| Sun JRE | =1.3.1-update8 | |
| Hp Java Sdk-rte | =1.3 | |
| Sun JRE | =1.3.0-update4 | |
| Sun JDK | =1.3.1_01 | |
| Sun JRE | =1.4.1-update3 | |
| Sun JDK | =1.4.1_01 | |
| Sun JRE | =1.4.1_07 | |
| Sun JDK | =1.4 | |
| Sun JRE | =1.3.1_03 | |
| Sun JDK | =1.4.0_02 | |
| Sun JRE | =1.3.1_09 | |
| Sun JRE | =1.3.1_05 | |
| Sun JRE | =1.4.2-update2 | |
| Sun JDK | =1.4.2_05 | |
| Sun JRE | =1.4.0_02 | |
| Sun JRE | =1.4.1 | |
| Sun JRE | =1.3.0 | |
| HP HP-UX | =11.11 | |
| HP HP-UX | =11.00 | |
| HP HP-UX | =11.23 | |
| HP HP-UX | =11.22 | |
| Gentoo Linux | ||
| Symantec Gateway Security 5400 | =2.0.1 | |
| Symantec Gateway Security 5400 | =2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1
- http://www.kb.cert.org/vuls/id/760344
- http://secunia.com/advisories/13271
- http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1
- http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html
- http://securityreason.com/securityalert/61
- http://jouko.iki.fi/adv/javaplugin.html
- http://www-1.ibm.com/support/docview.wss?uid=swg21257249
- http://www.securityfocus.com/bid/12317
- http://secunia.com/advisories/29035
- http://www.vupen.com/english/advisories/2008/0599
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18188
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sun
- canonical/sun jre
- version/sun jre/1.4.0_02
- version/sun jre/1.3.1_06
- vendor/symantec
- canonical/symantec enterprise firewall
- version/symantec enterprise firewall/8.0
- version/sun jre/1.3.1_03
- version/sun jre/1.4.0_04
- canonical/sun jdk
- version/sun jdk/1.4.0_4
- version/sun jdk/1.3.1_06
- version/sun jdk/1.4.1_03
- version/sun jre/1.4.2-update2
- version/sun jdk/1.4.2_05
- version/sun jdk/1.4.0_02
- version/sun jre/1.4.0_01
- version/sun jdk/1.4.2
- version/sun jre/1.4.2-update5
- version/sun jdk/1.3.1_02
- version/sun jre/1.4.2-update3
- version/sun jdk/1.3.1_01
- version/sun jre/1.4.1
- version/sun jdk/1.4.0_03
- version/sun jre/1.3.1_07
- version/sun jdk/1.3.1_03
- version/sun jre/1.4.2-update4
- version/sun jdk/1.4.1_02
- version/sun jdk/1.3.1_07
- version/sun jdk/1.4
- version/sun jre/1.3.1-update1
- version/sun jre/1.4.0_03
- version/sun jre/1.4.1_02
- version/sun jre/1.4.1-update3
- version/sun jre/1.4
- version/sun jre/1.4.1_01
- version/sun jdk/1.4.2_01
- version/sun jdk/1.3.1_05
- version/sun jdk/1.4.2_04
- version/sun jre/1.3.1-update4
- version/sun jre/1.3.1_05
- version/sun jdk/1.4.1
- version/sun jre/1.3.1-update1a
- version/sun jre/1.4.2-update1
- version/sun jre/1.3.0
- version/sun jdk/1.4.2_03
- version/sun jdk/1.4.0_01
- version/sun jre/1.3.0-update5
- version/sun jdk/1.4.1_01
- version/sun jre/1.3.0-update2
- version/sun jre/1.3.1_02
- version/sun jre/1.3.1-update8
- version/sun jdk/1.3.1_01a
- version/sun jre/1.3.1
- version/sun jre/1.3.1_09
- version/sun jre/1.4.2
- version/sun jre/1.3.0-update4
- version/sun jre/1.3.0-update3
- vendor/hp
- canonical/hp java sdk-rte
- version/hp java sdk-rte/1.4
- version/sun jdk/1.3.1_04
- version/sun jdk/1.4.2_02
- version/sun jre/1.3.0-update1
- vendor/conectiva
- canonical/conectiva linux
- version/conectiva linux/10.0
- version/hp java sdk-rte/1.3
- version/sun jre/1.4.1_07
- canonical/hp hp-ux
- version/hp hp-ux/11.11
- version/hp hp-ux/11.00
- version/hp hp-ux/11.23
- version/hp hp-ux/11.22
- vendor/gentoo
- canonical/gentoo linux
- canonical/symantec gateway security 5400
- version/symantec gateway security 5400/2.0.1
- version/symantec gateway security 5400/2.0