Sun Java Desktop System vulnerabilities

5 CVEs affecting Sun Java Desktop System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-1170, published 2005-01-10.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-1170, published 2005-01-10. High severity, CVSS 10.0. EPSS: 16% chance of exploitation in the next 30 days. a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
• CVE-2004-0827, published 2004-09-16. High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days. Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute…
• CVE-2004-0817, published 2004-12-31. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
• CVE-2004-0801, published 2004-09-16. High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days. Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
• CVE-2004-0802, published 2004-12-31. Medium severity, CVSS 5.1. EPSS: 3.4% chance of exploitation in the next 30 days. Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.