The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Java | — | Upgrade macOS to the latest versionApply Apple macOS Security Update 2005-002 | Jun 25, 2026 | Feb 22, 2005 |
| Freebsd | — | Upgrade linux-jdkUpgrade jdkUpgrade diablo-jreUpgrade diablo-jdkUpgrade linux-sun-jdkUpgrade linux-ibm-jdkUpgrade linux-blackdown-jdk | Dec 10, 2025 | Nov 25, 2004 |
| Gentoo Linux | — | Upgrade dev-java/blackdown-jre.Upgrade dev-java/sun-jdk.Upgrade dev-java/blackdown-jdk.Upgrade dev-java/sun-jre-bin. | Oct 30, 2017 | Mar 1, 2005 |
| Hpux | — | Update Jdk15.JDK15-IPF64 to the latest versionUpdate Jre15.JRE15-COM to the latest versionUpdate Jre15.JRE15-IPF32 to the latest versionUpdate Jre15.JRE15-PNV2 to the latest versionUpdate Jre15.JRE15-IPF64 to the latest versionUpdate Jdk15.JDK15-PA20 to the latest versionUpdate Jdk15.JDK15-PA20W to the latest versionUpdate Jre15.JRE15-PA20W to the latest versionUpdate Jdk15.JDK15-PNV2 to the latest versionUpdate Jre15.JRE15-PA20W-HS to the latest versionUpdate Jdk15.JDK15-PWV2 to the latest versionUpdate Jre15.JRE15-PA20-HS to the latest versionUpdate Jdk15.JDK15-IPF32 to the latest versionUpdate Jre15.JRE15-PWV2-H to the latest versionUpdate Jre15.JRE15-PA20 to the latest versionUpdate Jre15.JRE15-PWV2 to the latest versionUpdate Jre15.JRE15-COM-DOC to the latest versionUpdate Jre15.JRE15-IPF64-HS to the latest versionUpdate Jdk15.JDK15-DEMO to the latest versionUpdate Jdk15.JDK15-COM to the latest versionUpdate Jre15.JRE15-IPF32-HS to the latest versionUpdate Jre15.JRE15-PNV2-H to the latest version | Aug 11, 2017 | Mar 1, 2005 |
| Suse | — | Upgrade java2Upgrade java2-jre | Feb 17, 2015 | Mar 1, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub