Vulnerability in Sun J2se
CVE-2005-0418
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836.
EPSS: 0.015 (70.7th percentile) — read the EPSS interpretation.
Affected products
- Sun J2se — versions 1.4.2, 1.4.2_01, 1.4.2_02
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)