PT-2005-1480 · Oracle+1 · J2Se+2

Publicado 2005-03-24 · Atualizado 2008-09-05 · CVE-2005-0418

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java Web Start for J2SE versions 1.4.2 up to 1.4.2 06

Description The issue allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file, specifically on Mac OS X.

Recommendations For Java Web Start for J2SE versions 1.4.2 up to 1.4.2 06, consider restricting the use of JNLP files until a patch is available. As a temporary workaround, avoid using the value parameter of a property tag in JNLP files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0418

Produtos afetados

J2Se

Java Web Start

Macos X

Referências · 2

• http://lists.apple.com/archives/security-announce/2005/Mar/msg00001.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0418 · Nota de Segurança