Java Class Access Vulnerability in Konqueror by KDE

CVE-2004-1145

What is CVE-2004-1145?

Multiple vulnerabilities in the Konqueror web browser affect KDE versions up to 3.3.1. The first vulnerability allows access to restricted Java classes via JavaScript, while the second fails to properly restrict access to certain Java classes from Java applets. This can enable remote attackers to circumvent sandbox restrictions, potentially allowing them to read or write arbitrary files on the user's system. This poses significant risks, as malicious actors can exploit these vulnerabilities to gain unauthorized access to sensitive information.

References