CVE-2005-0836: Critical severity sun j2se vulnerability
Published Mar 22, 2005
·Updated
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
Affected Software
7 affected components
Sun J2se=1.4.2_02
Sun J2se=1.4.2_05
Sun J2se=1.4.2_03
Sun J2se=1.4.2_04
Sun J2se=1.4.2_06
Sun J2se=1.4.2_01
Sun J2se=1.4.2
Remediation
Patch Available
Patch Available
Event History
Mar 22, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0836?
CVE-2005-0836 is rated as a moderate severity vulnerability.
2
How do I fix CVE-2005-0836?
To fix CVE-2005-0836, upgrade to a newer version of Java Web Start beyond 1.4.2_06.
3
What is the impact of CVE-2005-0836?
The impact of CVE-2005-0836 allows untrusted applications to gain elevated privileges.
4
Which versions of J2SE are affected by CVE-2005-0836?
CVE-2005-0836 affects J2SE versions from 1.4.2 up to 1.4.2_06.
5
Is CVE-2005-0836 present in JDK installations?
Yes, CVE-2005-0836 is present in Java Web Start for JDK installations of the affected versions.