FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

jdk/jre -- Security Vulnerability With Java Plugin

Affected packages
1.4.0	<=	jdk	<=	1.4.2p6_6
1.3.0	<=	jdk	<=	1.3.1p9_5
1.4.0	<=	linux-jdk	<=	1.4.2.05
1.3.0	<=	linux-jdk	<=	1.3.1.13
1.4.0	<=	linux-sun-jdk	<=	1.4.2.05
1.3.0	<=	linux-sun-jdk	<=	1.3.1.13
1.3.0	<=	linux-blackdown-jdk	<=	1.4.2
1.3.0	<=	linux-ibm-jdk	<=	1.4.2
1.3.1.0	<=	diablo-jdk	<=	1.3.1.0_1
1.3.1.0	<=	diablo-jre	<=	1.3.1.0_1

Details

VuXML ID	ac619d06-3ef8-11d9-8741-c942c075aa41
Discovery	2004-11-24
Entry	2004-11-25
Modified	2005-04-27

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code.

References

CVE Name	CVE-2004-1029
Message	20041123070248.GA25385@jouko.iki.fi
URL	http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1&searchclause=%22category:security%22%20%22availability,%20security%22
URL	http://www.securityfocus.com/archive/1/382072