CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2005-0418
https://notcve.org/view.php?id=CVE-2005-0418
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836. • http://lists.apple.com/archives/security-announce/2005/Mar/msg00001.html •
CVSS: 10.0EPSS: 43%CPEs: 7EXPL: 0CVE-2005-0836
https://notcve.org/view.php?id=CVE-2005-0836
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. • http://jouko.iki.fi/adv/ws.html http://marc.info/?l=full-disclosure&m=111117284323657&w=2 http://secunia.com/advisories/14640 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57740-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200255-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000200.1-1 http://www.gentoo.org/security/en/glsa/glsa-200503-28.xml http://www.novell.com/linux/security/advisories/2005_32_java2.html http://w •