CVE-2004-2764: Sun JRE

High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."

Affected products

• Sun JRE: version 1.4.0 only; version 1.4.0_01 only; version 1.4.0_02 only; version 1.4.0_03 only; version 1.4.0_04 only; version 1.4.1 only; …
• Sun SDK: version 1.4.0 only; version 1.4.0_01 only; version 1.4.0_02 only; version 1.4.0_03 only; version 1.4.0_04 only; version 1.4.1 only; …

Published 2009-06-02. Last modified 2026-06-16.