CVE-2004-2764

critical

Description

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16864

http://www.securityfocus.com/bid/10844

http://www.securityfocus.com/archive/1/371208

http://www.osvdb.org/8288

http://securitytracker.com/id?1011661

http://secunia.com/advisories/12206

http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d

http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html

Details

Source: Mitre, NVD

Published: 2009-06-02

Updated: 2026-04-23

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01067