CVE-2005-4845: Medium severity sun java embedding plugin vulnerability

Published Dec 31, 2005

Updated

The Java Plug-in 1.4.203 and 1.4.204 controls, and the 1.4.203 and 1.4.204 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

Affected Software

2 affected components

Sun Java Plug-In=1.4.2_04

Sun Java Plug-In=1.4.2_03

Event History

Dec 31, 2005

CVE Published

05:00 AM

Jun 11, 2007

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4845?

CVE-2005-4845 is classified as a denial-of-service vulnerability which can lead to crashes in Internet Explorer.

How do I fix CVE-2005-4845?

To fix CVE-2005-4845, update to a newer version of the Java Plug-in that is not affected by this vulnerability.

Which versions of Java Plug-in are affected by CVE-2005-4845?

CVE-2005-4845 affects the Java Plug-in versions 1.4.2_03 and 1.4.2_04.

Can CVE-2005-4845 be exploited remotely?

Yes, CVE-2005-4845 can be exploited remotely by attackers to crash Internet Explorer.

What type of attack does CVE-2005-4845 relate to?

CVE-2005-4845 relates to a denial of service attack targeting Internet Explorer through Java Plug-in controls.