PT-2005-1865
CVE-2005-0836
·
Publicado
2005-03-22
·
Atualizado
2016-10-18
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
J2SE versions 1.4.2 up to 1.4.2 06
Description
The issue allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. This is related to an argument injection vulnerability in Java Web Start.
Recommendations
For J2SE versions 1.4.2 up to 1.4.2 06, update to a version that contains a fix for this issue to prevent untrusted applications from gaining privileges.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾