Skip to content

CVE-2004-1029 The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data....

HighCVSS 9.3 EPSS 17.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

Affected products

ProductAffected versionsFixed in
HP Inc java sdk-rte = 1.3 No fix listed
HP Inc java sdk-rte = 1.4 No fix listed
sun jdk = 1.3.1_01 No fix listed
sun jdk = 1.3.1_01a No fix listed
sun jdk = 1.3.1_02 No fix listed
sun jdk = 1.3.1_03 No fix listed
sun jdk = 1.3.1_04 No fix listed
sun jdk = 1.3.1_05 No fix listed
sun jdk = 1.3.1_06 No fix listed
sun jdk = 1.3.1_07 No fix listed
sun jdk = 1.4 No fix listed
sun jdk = 1.4.0_01 No fix listed
sun jdk = 1.4.0_02 No fix listed
sun jdk = 1.4.0_03 No fix listed
sun jdk = 1.4.0_4 No fix listed
sun jdk = 1.4.1 No fix listed
sun jdk = 1.4.1_01 No fix listed
sun jdk = 1.4.1_02 No fix listed
sun jdk = 1.4.1_03 No fix listed
sun jdk = 1.4.2 No fix listed
sun jdk = 1.4.2_01 No fix listed
sun jdk = 1.4.2_02 No fix listed
sun jdk = 1.4.2_03 No fix listed
sun jdk = 1.4.2_04 No fix listed
sun jdk = 1.4.2_05 No fix listed
Show 42 more
ProductAffected versionsFixed in
sun jre = 1.3.0 No fix listed
sun jre = 1.3.0-update1 No fix listed
sun jre = 1.3.0-update2 No fix listed
sun jre = 1.3.0-update3 No fix listed
sun jre = 1.3.0-update4 No fix listed
sun jre = 1.3.0-update5 No fix listed
sun jre = 1.3.1 No fix listed
sun jre = 1.3.1-update1 No fix listed
sun jre = 1.3.1-update1a No fix listed
sun jre = 1.3.1-update4 No fix listed
sun jre = 1.3.1-update8 No fix listed
sun jre = 1.3.1_02 No fix listed
sun jre = 1.3.1_03 No fix listed
sun jre = 1.3.1_05 No fix listed
sun jre = 1.3.1_06 No fix listed
sun jre = 1.3.1_07 No fix listed
sun jre = 1.3.1_09 No fix listed
sun jre = 1.4 No fix listed
sun jre = 1.4.0_01 No fix listed
sun jre = 1.4.0_02 No fix listed
sun jre = 1.4.0_03 No fix listed
sun jre = 1.4.0_04 No fix listed
sun jre = 1.4.1 No fix listed
sun jre = 1.4.1-update3 No fix listed
sun jre = 1.4.1_01 No fix listed
sun jre = 1.4.1_02 No fix listed
sun jre = 1.4.1_07 No fix listed
sun jre = 1.4.2 No fix listed
sun jre = 1.4.2-update1 No fix listed
sun jre = 1.4.2-update2 No fix listed
sun jre = 1.4.2-update3 No fix listed
sun jre = 1.4.2-update4 No fix listed
sun jre = 1.4.2-update5 No fix listed
symantec enterprise firewall = 8.0 No fix listed
conectiva linux = 10.0 No fix listed
gentoo linux All versions No fix listed
HP Inc hp-ux = 11.00 No fix listed
HP Inc hp-ux = 11.11 No fix listed
HP Inc hp-ux = 11.22 No fix listed
HP Inc hp-ux = 11.23 No fix listed
symantec gateway security 5400 = 2.0 No fix listed
symantec gateway security 5400 = 2.0.1 No fix listed

References