Sun Java vulnerabilities

7 vulnerabilities

Known vulnerabilities in Sun Java, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.1CVE-2003-1134sunjava
EPSS score
0.80%
Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception.10CVE-2005-2530sunjava
EPSS score
2.51%
Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."10CVE-2005-2529sunjava
EPSS score
2.31%
Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."5CVE-2005-2738sunjava
EPSS score
1.76%
Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program.1.2CVE-2005-2527sunjava
EPSS score
0.32%
Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack.7.5CVE-2008-3440sunjava
EPSS score
2.41%
Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.10CVE-2010-0887redhatjava-1.6.0-ibm+8
EPSS score
9.43%
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.