PT-2005-1865
CVE-2005-0836
·
تاريخ النشر
2005-03-22
·
تاريخ التحديث
2016-10-18
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
J2SE versions 1.4.2 up to 1.4.2 06
Description
The issue allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. This is related to an argument injection vulnerability in Java Web Start.
Recommendations
For J2SE versions 1.4.2 up to 1.4.2 06, update to a version that contains a fix for this issue to prevent untrusted applications from gaining privileges.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾