CVE-2005-4845

The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-12-31

Last modified

2024-09-16

Weaknesses

CWE-16

Affected products

• Java Plug-in (Sun)

References

• http://www.securityfocus.com/archive/1/391803