CVE-2005-4845: Sun Java Plug-In

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

Affected products

• Sun Java Plug-In: version 1.4.2_03 only; version 1.4.2_04 only

Published 2005-12-31. Last modified 2026-06-16.