BlackdownJava2-JRE: Java(TM) 2 Runtime Environment ---------------------------------------------------------------------- File: BlackdownJava2-JRE-1.4.2-2.i586.rpm Patchrpm: BlackdownJava2-JRE-1.4.2-2.i586.patch.rpm Version: 1.4.2-2 Size: 18062 kB Patchsize: 18058 kB Date: Thu 20 Jan 2005 15:33:11 CET Source: BlackdownJava2-JRE-1.4.2-2.src.rpm Security: Yes ---------------------------------------------------------------------- Description: A vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the privileges of the user running the applet. (Mitre CVE ID CAN-2004-1029)