Vulnerability in Sun Java Plug-In
CVE-2005-4845
The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.
EPSS: 0.017 (74.8th percentile) — read the EPSS interpretation.
Affected products
- Sun Java_plug-in — versions 1.4.2_03, 1.4.2_04
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)