Vulnerability in Sun J2se
CVE-2005-0836
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
EPSS: 0.029 (85.6th percentile) — read the EPSS interpretation.
Affected products
- Sun J2se — versions 1.4.2, 1.4.2_01, 1.4.2_02
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)