CVE-2004-1145: Altlinux Alt Linux

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.

Affected products

• Altlinux Alt Linux: version 2.3 only
• Conectiva Linux: version 9.0 only; version 10.0 only
• Debian Debian Linux: version 3.0 only
• Ethereal Group Ethereal: version 0.9 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.9.4 only; version 0.9.5 only; …
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Sgi Propack: version 3.0 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only

Published 2004-12-15. Last modified 2026-06-16.