NVD

Id
71429  
Name
CVE-2004-1029  
Description
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-03-01  
Modified Date
2017-07-10  
Seq
2004-1029  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369328 71429 CVE-2004-1029 http://jouko.iki.fi/adv/javaplugin.html  View
369329 71429 CVE-2004-1029 APPLE-SA-2005-02-22  View
369330 71429 CVE-2004-1029 oval:org.mitre.oval:def:5674  View
369331 71429 CVE-2004-1029 http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html  View
369332 71429 CVE-2004-1029 61  View
369333 71429 CVE-2004-1029 101523  View
369334 71429 CVE-2004-1029 57591  View
369335 71429 CVE-2004-1029 http://www-1.ibm.com/support/docview.wss?uid=swg21257249  View
369336 71429 CVE-2004-1029 20041122 Sun Java Plugin Arbitrary Package Access Vulnerability  View
369337 71429 CVE-2004-1029 VU#760344  View
369338 71429 CVE-2004-1029 12317  View
369339 71429 CVE-2004-1029 ADV-2008-0599  View
369340 71429 CVE-2004-1029 sdk-jre-applet-restriction-bypass(18188)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63155 JVNDB-2004-000497 Sun Java SDK および JRE の Sun Java プラグインにおける任意のコードを実行される脆弱性 Sun JRE の Sun Java プラグイン機能には、データ転送の間、JavaScript および Java アプレット間のアクセス制限を適切に行わないため、安全ではないクラスをロードされ、任意のコードを実行される脆弱性が存在します。 CVE-2004-1029 9456 CVE-2004-1029 71429 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000497.html 2004-11-22 2008-03-03 View