Unrated severityNVD Advisory· Published May 2, 2005· Updated Apr 16, 2026
CVE-2005-0836
CVE-2005-0836
Description
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
Affected products
7cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*+ 6 more
- cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*
- cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*
- cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*
- cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*
- cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*
- cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*
- cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.gentoo.org/security/en/glsa/glsa-200503-28.xmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/12847nvdPatch
- secunia.com/advisories/14640nvdVendor Advisory
- jouko.iki.fi/adv/ws.htmlnvd
- marc.infonvd
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- www.novell.com/linux/security/advisories/2005_32_java2.htmlnvd
News mentions
0No linked articles in our index yet.