Strix
26.1K

CVE-2004-1029

UnknownEPSS 17.02%

Last modified

CVE-2004-1029 is a vulnerability of currently unknown severity. The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.. EPSS estimates a 17.02% chance of exploitation in the next 30 days.

Description

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

Metrics

EPSS Probability
17.02%

96.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HpJava Sdk-Rte1.3
HpJava Sdk-Rte1.4
SunJdk1.3.1_01
SunJdk1.3.1_01a
SunJdk1.3.1_02
SunJdk1.3.1_03
SunJdk1.3.1_04
SunJdk1.3.1_05
SunJdk1.3.1_06
SunJdk1.3.1_07
SunJdk1.4
SunJdk1.4.0_01
SunJdk1.4.0_02
SunJdk1.4.0_03
SunJdk1.4.0_4
SunJdk1.4.1
SunJdk1.4.1_01
SunJdk1.4.1_02
SunJdk1.4.1_03
SunJdk1.4.2
SunJdk1.4.2_01
SunJdk1.4.2_02
SunJdk1.4.2_03
SunJdk1.4.2_04
SunJdk1.4.2_05
SunJre1.3.0
SunJre1.3.1
SunJre1.3.1_02
SunJre1.3.1_03
SunJre1.3.1_05
SunJre1.3.1_06
SunJre1.3.1_07
SunJre1.3.1_09
SunJre1.4
SunJre1.4.0_01
SunJre1.4.0_02
SunJre1.4.0_03
SunJre1.4.0_04
SunJre1.4.1
SunJre1.4.1_01
SunJre1.4.1_02
SunJre1.4.1_07
SunJre1.4.2
SymantecEnterprise Firewall8.0
ConectivaLinux10.0
GentooLinuxAll versions
HpHp-Ux11.00
HpHp-Ux11.11
HpHp-Ux11.22
HpHp-Ux11.23

Showing 50 of 52 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2004-1029?
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
How severe is CVE-2004-1029?
Severity scoring for CVE-2004-1029 is pending analysis. The EPSS model estimates a 17.02% probability of exploitation in the next 30 days.
How do I fix CVE-2004-1029?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-1029?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST