Vulnerability in Sun Jre

CVE-2004-2764

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."

EPSS: 0.024 (82.0th percentile) — read the EPSS interpretation.

Affected products

Sun Jre — versions 1.4.0, 1.4.0_01, 1.4.0_02
Sun Sdk — versions 1.4.0, 1.4.0_01, 1.4.0_02
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_HP, vendor-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)