GCVE - cpe:2.3:a:sun:jre:1.4.0_01:*:windows:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:1.4.0_01:*:windows:*:*:*:*:*

part: a version: 1.4.0_01 update: *

Vendor	Sun (`f793a52f-9733-5503-ba70-29fa391cdd2b`)
Product	Jre (`ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e`)
Edition	windows
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-2764`	vulnerable	2026-06-08 04:48:10.843716	Details available Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing." Published: 2009-06-02T10:00:00.000Z Updated: 2024-08-08T01:36:25.300Z Open on db.gcve.eu Reference links http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d https://exchange.xforce.ibmcloud.com/vulnerabilities/16864 http://www.osvdb.org/8288 http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html http://securitytracker.com/id?1011661	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2540`	vulnerable	2026-06-08 04:48:10.071946	Details available readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows remote attackers to cause a denial of service (JVM unresponsive) via crafted serialized data. Published: 2005-11-16T07:37:00.000Z Updated: 2024-08-08T01:29:13.924Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2005-04/0113.html http://secunia.com/advisories/13271/ http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-57707-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/20027	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1029`	vulnerable	2026-06-08 04:47:52.518519	Details available The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages. Published: 2004-11-24T05:00:00.000Z Updated: 2024-08-08T00:39:00.544Z Open on db.gcve.eu Reference links http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities http://jouko.iki.fi/adv/javaplugin.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674 http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1123`	vulnerable	2026-06-08 04:47:23.436896	Details available Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model. Published: 2005-03-12T05:00:00.000Z Updated: 2024-08-08T02:19:44.736Z Open on db.gcve.eu Reference links http://sunsolve.sun.com/search/document.do?assetkey=1-26-55100-1 http://www.kb.cert.org/vuls/id/393292 http://www.securityfocus.com/bid/7824 https://exchange.xforce.ibmcloud.com/vulnerabilities/12189 http://secunia.com/advisories/8958	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.