CVE-2004-2764 Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read dat...
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.4.0 | No fix listed |
| sun jre | = 1.4.0_01 | No fix listed |
| sun jre | = 1.4.0_02 | No fix listed |
| sun jre | = 1.4.0_03 | No fix listed |
| sun jre | = 1.4.0_04 | No fix listed |
| sun jre | = 1.4.1 | No fix listed |
| sun jre | = 1.4.1-update1 | No fix listed |
| sun jre | = 1.4.1-update2 | No fix listed |
| sun jre | = 1.4.1-update3 | No fix listed |
| sun jre | = 1.4.1-update4 | No fix listed |
| sun jre | = 1.4.1-update7 | No fix listed |
| sun jre | = 1.4.1_01 | No fix listed |
| sun jre | = 1.4.1_02 | No fix listed |
| sun jre | = 1.4.1_03 | No fix listed |
| sun jre | = 1.4.1_04 | No fix listed |
| sun jre | = 1.4.1_05 | No fix listed |
| sun jre | = 1.4.1_06 | No fix listed |
| sun jre | = 1.4.1_07 | No fix listed |
| sun jre | = 1.4.2 | No fix listed |
| sun jre | = 1.4.2-update1 | No fix listed |
| sun jre | = 1.4.2-update2 | No fix listed |
| sun jre | = 1.4.2-update3 | No fix listed |
| sun jre | = 1.4.2-update4 | No fix listed |
| sun jre | = 1.4.2-update5 | No fix listed |
| sun jre | = 1.4.2_01 | No fix listed |
Show 37 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.4.2_1 | No fix listed |
| sun jre | = 1.4.2_2 | No fix listed |
| sun jre | = 1.4.2_02 | No fix listed |
| sun jre | = 1.4.2_03 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_4 | No fix listed |
| sun jre | = 1.4.2_04 | No fix listed |
| sun jre | = 1.4.2_5 | No fix listed |
| sun jre | = 1.4.2_6 | No fix listed |
| sun jre | = 1.4.2_7 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.4.2_13 | No fix listed |
| sun jre | = 1.4.2_14 | No fix listed |
| sun jre | = 1.4.2_15 | No fix listed |
| sun jre | = 1.4.2_21 | No fix listed |
| sun sdk | = 1.4.0 | No fix listed |
| sun sdk | = 1.4.0_01 | No fix listed |
| sun sdk | = 1.4.0_02 | No fix listed |
| sun sdk | = 1.4.0_03 | No fix listed |
| sun sdk | = 1.4.0_04 | No fix listed |
| sun sdk | = 1.4.1 | No fix listed |
| sun sdk | = 1.4.1_01 | No fix listed |
| sun sdk | = 1.4.1_02 | No fix listed |
| sun sdk | = 1.4.1_03 | No fix listed |
| sun sdk | = 1.4.1_04 | No fix listed |
| sun sdk | = 1.4.1_05 | No fix listed |
| sun sdk | = 1.4.1_06 | No fix listed |
| sun sdk | = 1.4.1_07 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_01 | No fix listed |
| sun sdk | = 1.4.2_02 | No fix listed |
| sun sdk | = 1.4.2_03 | No fix listed |
| sun sdk | = 1.4.2_04 | No fix listed |
References
- 57613 vendor-advisory
- HPSBUX01087 vendor-advisory
- 12206 third-party-advisory vendor-advisory
- 1011661 vdb-entry
- 8288 vdb-entry
- 20040808 Java XSLT security advisory addendum mailing-list
- 10844 vdb-entry
- sun-xslt-applet-gain-privileges(16864) vdb-entry