Sun Java Plug-in Multiple Applet Vulnerabilities

BID:12317

Info

Sun Java Plug-in Multiple Applet Vulnerabilities

Bugtraq ID: 12317
Class: Access Validation Error
CVE: CVE-2004-1029
Remote: Yes
Local: No
Published: Jan 20 2005 12:00AM
Updated: Apr 07 2008 04:18PM
Credit: Discovery is credited to Fujitsu.
Vulnerable: Sun SDK (Windows Production Release) 1.4.2 _05
Sun SDK (Windows Production Release) 1.4.2 _04
Sun SDK (Windows Production Release) 1.4.2 _03
Sun SDK (Windows Production Release) 1.4.2
Sun SDK (Windows Production Release) 1.4.1 _03
Sun SDK (Windows Production Release) 1.4.1 _02
Sun SDK (Windows Production Release) 1.4.1 _01
Sun SDK (Windows Production Release) 1.4.1
Sun SDK (Windows Production Release) 1.4 .0_4
Sun SDK (Windows Production Release) 1.4 .0_03
Sun SDK (Windows Production Release) 1.4 .0_02
Sun SDK (Windows Production Release) 1.4 .0_01
Sun SDK (Windows Production Release) 1.4
Sun SDK (Windows Production Release) 1.3.1 _14
Sun SDK (Windows Production Release) 1.3.1 _13
Sun SDK (Windows Production Release) 1.3.1 _12
Sun SDK (Windows Production Release) 1.3.1 _11
Sun SDK (Windows Production Release) 1.3.1 _10
Sun SDK (Windows Production Release) 1.3.1 _09
Sun SDK (Windows Production Release) 1.3.1 _08
Sun SDK (Windows Production Release) 1.3.1 _07
Sun SDK (Windows Production Release) 1.3.1 _06
Sun SDK (Windows Production Release) 1.3.1 _05
Sun SDK (Windows Production Release) 1.3.1 _04
Sun SDK (Windows Production Release) 1.3.1 _03
Sun SDK (Windows Production Release) 1.3.1 _02
Sun SDK (Windows Production Release) 1.3.1 _01a
Sun SDK (Solaris Production Release) 1.4.2 _05
Sun SDK (Solaris Production Release) 1.4.2 _04
Sun SDK (Solaris Production Release) 1.4.2 _03
Sun SDK (Solaris Production Release) 1.4.2
Sun SDK (Solaris Production Release) 1.4.1 _03
Sun SDK (Solaris Production Release) 1.4.1 _02
Sun SDK (Solaris Production Release) 1.4.1 _01
Sun SDK (Solaris Production Release) 1.4.1
Sun SDK (Solaris Production Release) 1.4 .0_4
Sun SDK (Solaris Production Release) 1.4 .0_03
Sun SDK (Solaris Production Release) 1.4 .0_02
Sun SDK (Solaris Production Release) 1.4
Sun SDK (Solaris Production Release) 1.3.1 _14
Sun SDK (Solaris Production Release) 1.3.1 _13
Sun SDK (Solaris Production Release) 1.3.1 _12
Sun SDK (Solaris Production Release) 1.3.1 _11
Sun SDK (Solaris Production Release) 1.3.1 _10
Sun SDK (Solaris Production Release) 1.3.1 _09
Sun SDK (Solaris Production Release) 1.3.1 _08
Sun SDK (Solaris Production Release) 1.3.1 _07
Sun SDK (Solaris Production Release) 1.3.1 _06
Sun SDK (Solaris Production Release) 1.3.1 _05
Sun SDK (Solaris Production Release) 1.3.1 _03
Sun SDK (Solaris Production Release) 1.3.1 _02
Sun SDK (Solaris Production Release) 1.3.1 _01
Sun SDK (Linux Production Release) 1.4.2 _05
Sun SDK (Linux Production Release) 1.4.2 _04
Sun SDK (Linux Production Release) 1.4.2 _03
Sun SDK (Linux Production Release) 1.4.2 _02
Sun SDK (Linux Production Release) 1.4.2 _01
Sun SDK (Linux Production Release) 1.4.2
Sun SDK (Linux Production Release) 1.4.1 _03
Sun SDK (Linux Production Release) 1.4.1 _02
Sun SDK (Linux Production Release) 1.4.1 _01
Sun SDK (Linux Production Release) 1.4.1
Sun SDK (Linux Production Release) 1.4 .0_4
Sun SDK (Linux Production Release) 1.4 .0_03
Sun SDK (Linux Production Release) 1.4 .0_02
Sun SDK (Linux Production Release) 1.4
Sun SDK (Linux Production Release) 1.3.1 _14
Sun SDK (Linux Production Release) 1.3.1 _13
Sun SDK (Linux Production Release) 1.3.1 _12
Sun SDK (Linux Production Release) 1.3.1 _11
Sun SDK (Linux Production Release) 1.3.1 _10
Sun SDK (Linux Production Release) 1.3.1 _09
Sun SDK (Linux Production Release) 1.3.1 _08
Sun SDK (Linux Production Release) 1.3.1 _07
Sun SDK (Linux Production Release) 1.3.1 _06
Sun SDK (Linux Production Release) 1.3.1 _05
Sun SDK (Linux Production Release) 1.3.1 _03
Sun SDK (Linux Production Release) 1.3.1 _02
Sun SDK (Linux Production Release) 1.3.1 _01
Sun JRE (Windows Production Release) 1.4.2 _06
Sun JRE (Windows Production Release) 1.4.2 _05
Sun JRE (Windows Production Release) 1.4.2 _04
Sun JRE (Windows Production Release) 1.4.2 _03
Sun JRE (Windows Production Release) 1.4.2 _02
Sun JRE (Windows Production Release) 1.4.2 _01
Sun JRE (Windows Production Release) 1.4.2
Sun JRE (Windows Production Release) 1.4.1 _07
Sun JRE (Windows Production Release) 1.4.1 _03
Sun JRE (Windows Production Release) 1.4.1 _02
Sun JRE (Windows Production Release) 1.4.1 _01
Sun JRE (Windows Production Release) 1.4.1
Sun JRE (Windows Production Release) 1.4 .0_04
Sun JRE (Windows Production Release) 1.4 .0_03
Sun JRE (Windows Production Release) 1.4 .0_02
Sun JRE (Windows Production Release) 1.4 .0_01
Sun JRE (Windows Production Release) 1.4
Sun JRE (Windows Production Release) 1.3.1 _14
Sun JRE (Windows Production Release) 1.3.1 _13
Sun JRE (Windows Production Release) 1.3.1 _12
Sun JRE (Windows Production Release) 1.3.1 _11
Sun JRE (Windows Production Release) 1.3.1 _10
Sun JRE (Windows Production Release) 1.3.1 _09
Sun JRE (Windows Production Release) 1.3.1 _08
Sun JRE (Windows Production Release) 1.3.1 _07
Sun JRE (Windows Production Release) 1.3.1 _06
Sun JRE (Windows Production Release) 1.3.1 _05
Sun JRE (Windows Production Release) 1.3.1 _04
Sun JRE (Windows Production Release) 1.3.1 _03
Sun JRE (Windows Production Release) 1.3.1 _02
Sun JRE (Windows Production Release) 1.3.1 _01a
Sun JRE (Windows Production Release) 1.3.1 _01
Sun JRE (Solaris Production Release) 1.4.2 _06
Sun JRE (Solaris Production Release) 1.4.2 _05
Sun JRE (Solaris Production Release) 1.4.2 _04
+ Opera Software Opera Web Browser 7.54
Sun JRE (Solaris Production Release) 1.4.2 _03
Sun JRE (Solaris Production Release) 1.4.2 _02
Sun JRE (Solaris Production Release) 1.4.2 _01
Sun JRE (Solaris Production Release) 1.4.2
Sun JRE (Solaris Production Release) 1.4.1 _03
Sun JRE (Solaris Production Release) 1.4.1 _02
Sun JRE (Solaris Production Release) 1.4.1 _01
Sun JRE (Solaris Production Release) 1.4.1
Sun JRE (Solaris Production Release) 1.4 .0_04
Sun JRE (Solaris Production Release) 1.4 .0_04
Sun JRE (Solaris Production Release) 1.4 .0_03
Sun JRE (Solaris Production Release) 1.4 .0_02
Sun JRE (Solaris Production Release) 1.4 .0_01
Sun JRE (Solaris Production Release) 1.4
Sun JRE (Solaris Production Release) 1.3.1 _14
Sun JRE (Solaris Production Release) 1.3.1 _13
Sun JRE (Solaris Production Release) 1.3.1 _12
Sun JRE (Solaris Production Release) 1.3.1 _11
Sun JRE (Solaris Production Release) 1.3.1 _10
Sun JRE (Solaris Production Release) 1.3.1 _09
Sun JRE (Solaris Production Release) 1.3.1 _08
Sun JRE (Solaris Production Release) 1.3.1 _07
Sun JRE (Solaris Production Release) 1.3.1 _06
Sun JRE (Solaris Production Release) 1.3.1 _05
Sun JRE (Solaris Production Release) 1.3.1 _04
Sun JRE (Solaris Production Release) 1.3.1 _03
+ Macromedia ColdFusion Server MX Professional
 + Macromedia ColdFusion Server MX Enterprise
 + Macromedia ColdFusion Server MX Developer
 Sun JRE (Solaris Production Release) 1.3.1 _02
Sun JRE (Solaris Production Release) 1.3.1 _01
Sun JRE (Linux Production Release) 1.4.2 _05
Sun JRE (Linux Production Release) 1.4.2 _04
+ Opera Software Opera Web Browser 7.54
Sun JRE (Linux Production Release) 1.4.2 _03
Sun JRE (Linux Production Release) 1.4.2 _02
Sun JRE (Linux Production Release) 1.4.2 _01
Sun JRE (Linux Production Release) 1.4.2
Sun JRE (Linux Production Release) 1.4.1 _03
Sun JRE (Linux Production Release) 1.4.1 _02
Sun JRE (Linux Production Release) 1.4.1 _01
Sun JRE (Linux Production Release) 1.4.1
Sun JRE (Linux Production Release) 1.4 .0_04
Sun JRE (Linux Production Release) 1.4 .0_03
Sun JRE (Linux Production Release) 1.4 .0_02
Sun JRE (Linux Production Release) 1.4
Sun JRE (Linux Production Release) 1.3.1 _14
Sun JRE (Linux Production Release) 1.3.1 _13
Sun JRE (Linux Production Release) 1.3.1 _12
Sun JRE (Linux Production Release) 1.3.1 _11
Sun JRE (Linux Production Release) 1.3.1 _10
Sun JRE (Linux Production Release) 1.3.1 _09
Sun JRE (Linux Production Release) 1.3.1 _08
Sun JRE (Linux Production Release) 1.3.1 _07
Sun JRE (Linux Production Release) 1.3.1 _06
Sun JRE (Linux Production Release) 1.3.1 _05
Sun JRE (Linux Production Release) 1.3.1 _03
Sun JRE (Linux Production Release) 1.3.1 _02
Sun JRE (Linux Production Release) 1.3.1 _01
Sun JRE (Linux Production Release) 1.3.1
IBM Lotus Notes 7.0.1
IBM Lotus Notes 6.5.6
IBM Lotus Notes 6.5.5
IBM Lotus Notes 6.5.4
IBM Lotus Notes 6.5.3
IBM Lotus Notes 6.5.2
IBM Lotus Notes 6.5.1
IBM Lotus Notes 6.5
IBM Lotus Notes 6.0.5
IBM Lotus Notes 6.0.4
IBM Lotus Notes 6.0.3
IBM Lotus Notes 6.0.2
IBM Lotus Notes 6.0.1
IBM Lotus Notes 6.0
IBM Lotus Notes 5.0.12
IBM Lotus Notes 5.0.3
IBM Lotus Notes 7.0
IBM Lotus Notes 6.5.6 FP2
IBM Lotus Notes 6.5.5 FP3
IBM Lotus Notes 6.5.5 FP2
Not Vulnerable: IBM Lotus Notes 7.0.2

Discussion

Sun Java Plug-in Multiple Applet Vulnerabilities

The Sun Java Plug-in is prone to multiple vulnerabilities.

The first issue can allow an untrusted applet to escalate its privileges to access resources with the privilege level of the user running the applet.

This issue occurs only in Internet Explorer running on Windows.

The second issue allows an untrusted applet to interfere with another applet embedded in the same web page.

This issue occurs in Java running on Windows, Solaris, and Linux.

Exploit / POC

Sun Java Plug-in Multiple Applet Vulnerabilities

Evidence shows that this issue is being exploited in the wild.

Solution / Fix

Sun Java Plug-in Multiple Applet Vulnerabilities

Solution:
The first issue has been fixed in JRE and SDK 1.4.2_01 (and later) and 1.3.1_13 (and later).

The second issue has been fixed in JRE and SDK 1.4.2_06 (and later) and 1.3.1_13 (and later).


Sun SDK (Solaris Production Release) 1.3.1 _10

Sun SDK (Windows Production Release) 1.3.1 _12

Sun SDK (Linux Production Release) 1.3.1 _06

Sun JRE (Solaris Production Release) 1.3.1 _12

Sun SDK (Windows Production Release) 1.3.1 _09

Sun JRE (Solaris Production Release) 1.3.1 _02

Sun SDK (Solaris Production Release) 1.3.1 _12

Sun JRE (Linux Production Release) 1.3.1 _13

Sun SDK (Linux Production Release) 1.3.1 _09

Sun SDK (Linux Production Release) 1.3.1 _11

Sun SDK (Windows Production Release) 1.3.1 _05

Sun JRE (Windows Production Release) 1.3.1 _13

Sun SDK (Solaris Production Release) 1.3.1 _01

Sun JRE (Solaris Production Release) 1.3.1 _03

Sun JRE (Solaris Production Release) 1.3.1 _09

Sun SDK (Solaris Production Release) 1.3.1 _08

Sun JRE (Solaris Production Release) 1.3.1 _05

Sun SDK (Windows Production Release) 1.3.1 _13

Sun JRE (Linux Production Release) 1.3.1 _08

Sun SDK (Windows Production Release) 1.3.1 _07

Sun JRE (Linux Production Release) 1.3.1 _09

Sun JRE (Linux Production Release) 1.3.1 _01

Sun SDK (Linux Production Release) 1.3.1 _13

Sun JRE (Windows Production Release) 1.3.1 _01a

Sun SDK (Solaris Production Release) 1.3.1 _06

Sun SDK (Windows Production Release) 1.3.1 _04

Sun SDK (Linux Production Release) 1.3.1 _07

Sun JRE (Windows Production Release) 1.3.1 _08

Sun JRE (Linux Production Release) 1.3.1 _10

Sun JRE (Linux Production Release) 1.3.1 _05

Sun SDK (Solaris Production Release) 1.3.1 _05

Sun JRE (Linux Production Release) 1.3.1 _07

Sun SDK (Solaris Production Release) 1.3.1 _09

Sun JRE (Solaris Production Release) 1.3.1 _10

Sun SDK (Windows Production Release) 1.3.1 _01a

Sun SDK (Solaris Production Release) 1.3.1 _14

Sun JRE (Linux Production Release) 1.3.1 _02

Sun JRE (Windows Production Release) 1.4

Sun JRE (Linux Production Release) 1.4

Sun JRE (Windows Production Release) 1.4 .0_01

Sun JRE (Linux Production Release) 1.4 .0_03

Sun SDK (Windows Production Release) 1.4

Sun SDK (Solaris Production Release) 1.4 .0_03

Sun SDK (Windows Production Release) 1.4 .0_4

Sun SDK (Windows Production Release) 1.4 .0_03

Sun JRE (Solaris Production Release) 1.4 .0_02

Sun JRE (Solaris Production Release) 1.4 .0_03

Sun SDK (Windows Production Release) 1.4 .0_01

Sun SDK (Solaris Production Release) 1.4 .0_02

Sun JRE (Linux Production Release) 1.4 .0_02

Sun SDK (Linux Production Release) 1.4 .0_4

Sun JRE (Solaris Production Release) 1.4.1 _02

Sun JRE (Solaris Production Release) 1.4.1

Sun SDK (Solaris Production Release) 1.4.1 _01

Sun JRE (Linux Production Release) 1.4.1 _03

Sun JRE (Windows Production Release) 1.4.1

Sun JRE (Solaris Production Release) 1.4.2 _06

Sun JRE (Solaris Production Release) 1.4.2

Sun SDK (Windows Production Release) 1.4.2 _05

Sun JRE (Solaris Production Release) 1.4.2 _05

Sun JRE (Linux Production Release) 1.4.2 _01

Sun SDK (Windows Production Release) 1.4.2

Sun JRE (Windows Production Release) 1.4.2 _03

Sun SDK (Linux Production Release) 1.4.2 _02

Sun JRE (Windows Production Release) 1.4.2 _01

Sun JRE (Windows Production Release) 1.4.2 _02

Sun JRE (Linux Production Release) 1.4.2 _03

Sun SDK (Windows Production Release) 1.4.2 _04

Sun SDK (Solaris Production Release) 1.4.2 _03

Sun JRE (Linux Production Release) 1.4.2 _04

Sun JRE (Windows Production Release) 1.4.2 _05

Sun JRE (Windows Production Release) 1.4.2 _06

Sun SDK (Linux Production Release) 1.4.2 _04

Sun JRE (Linux Production Release) 1.4.2

Sun JRE (Solaris Production Release) 1.4.2 _04

References

Sun Java Plug-in Multiple Applet Vulnerabilities

References:
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report