CVE-2004-2764

Currently unrated

Key Information:

Vendor
Oracle
Status
Jre
Sdk
Vendor
CVE Published:
2 June 2009

Summary

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."

References

http://groups.google.com/group/comp.security.unix/tree/br...
vendor-advisoryx_refsource_HP
https://exchange.xforce.ibmcloud.com/vulnerabilities/16864
vdb-entryx_refsource_XF
http://www.osvdb.org/8288
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.