CVE-2004-2764

Sun JRE 1.4.0-1.4.2_04 - Privilege Escalation via XSLT Processor

Title source: llm

Description

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."

References (8)

Core 8

Core References

Mailing List vendor-advisory x_refsource_hp

http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/16864

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/8288

Various Sources vendor-advisory x_refsource_sunalert

http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1011661

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/371208

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/12206

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/10844

Scores

EPSS 0.0102

EPSS Percentile 77.5%

Details

CWE

CWE-264

Status published

Products (12)

sun/jre 1.4.0

sun/jre 1.4.0_01 (4 CPE variants)

sun/jre 1.4.0_02 (4 CPE variants)

sun/jre 1.4.0_03 (4 CPE variants)

sun/jre 1.4.0_04 (4 CPE variants)

sun/jre 1.4.1 (12 CPE variants)

sun/jre 1.4.1_01 (4 CPE variants)

sun/jre 1.4.1_02 (4 CPE variants)

sun/jre 1.4.1_03 (4 CPE variants)

sun/jre 1.4.1_04 (4 CPE variants)

... and 2 more

Published Jun 02, 2009

Tracked Since Feb 18, 2026