CVE-2004-1145

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-15 · updated 2026-06-16

Description

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.

Affected products

Altlinux Alt Linux: 2.3
Conectiva Linux: 9.0, 10.0
Debian Linux: 3.0
Ethereal Group Ethereal: 0.9, 0.9.1, 0.9.2, 0.9.3, 0.9.4, 0.9.5 (+19)
Red Hat Enterprise Linux: 2.1, 3.0
RedHat Enterprise Linux Desktop: 3.0
RedHat Linux Advanced Workstation: 2.1
Sgi Propack: 3.0
Suse Linux: 8.0, 8.1, 8.2, 9.0, 9.1, 9.2

References

http://marc.info/?l=bugtraq&m=110356286722875&w=2
http://secunia.com/advisories/13586
http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml
http://www.heise.de/security/dienste/browsercheck/tests/java.shtml
http://www.kb.cert.org/vuls/id/420222
http://www.kde.org/info/security/advisory-20041220-1.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2004:154
http://www.redhat.com/support/errata/RHSA-2005-065.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18596
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173
http://marc.info/?l=bugtraq&m=110356286722875&w=2
http://secunia.com/advisories/13586

Get alerted when CVE-2004-1145 or the next vulnerability affects your stack