Strix
26.1K

CVE-2004-2764

UnknownEPSS 2.36%

Last modified

CVE-2004-2764 is a vulnerability of currently unknown severity. Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing.". EPSS estimates a 2.36% chance of exploitation in the next 30 days.

Description

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."

Metrics

EPSS Probability
2.36%

81.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
SunJre1.4.0
SunJre1.4.0_01
SunJre1.4.0_02
SunJre1.4.0_03
SunJre1.4.0_04
SunJre1.4.1
SunJre1.4.1_01
SunJre1.4.1_02
SunJre1.4.1_03
SunJre1.4.1_04
SunJre1.4.1_05
SunJre1.4.1_06
SunJre1.4.1_07
SunJre1.4.2
SunJre1.4.2_01
SunJre1.4.2_1
SunJre1.4.2_2
SunJre1.4.2_02
SunJre1.4.2_03
SunJre1.4.2_3
SunJre1.4.2_4
SunJre1.4.2_04
SunJre1.4.2_5
SunJre1.4.2_6
SunJre1.4.2_7
SunJre1.4.2_8
SunJre1.4.2_9
SunJre1.4.2_10
SunJre1.4.2_11
SunJre1.4.2_12
SunJre1.4.2_13
SunJre1.4.2_14
SunJre1.4.2_15
SunJre1.4.2_21
SunSdk1.4.0
SunSdk1.4.0_01
SunSdk1.4.0_02
SunSdk1.4.0_03
SunSdk1.4.0_04
SunSdk1.4.1
SunSdk1.4.1_01
SunSdk1.4.1_02
SunSdk1.4.1_03
SunSdk1.4.1_04
SunSdk1.4.1_05
SunSdk1.4.1_06
SunSdk1.4.1_07
SunSdk1.4.2
SunSdk1.4.2_01
SunSdk1.4.2_02

Showing 50 of 52 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2004-2764?
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."
How severe is CVE-2004-2764?
Severity scoring for CVE-2004-2764 is pending analysis. The EPSS model estimates a 2.36% probability of exploitation in the next 30 days.
How do I fix CVE-2004-2764?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-2764?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST