Java Plug-in (Sun) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2005-12-31. Vendor: Sun.

CVEs of Java Plug-in

• CVE-2005-4845 - CVSS 5 (medium), 2005-12-31: The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of…
• CVE-2003-1521 - CVSS 6.4 (medium), 2003-12-31: Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the…
• CVE-2003-1516 - CVSS 6.8 (medium), 2003-12-31: The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the…
• CVE-2001-1008 - CVSS 7.5 (high), 2001-08-31: Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities…