MEDIUM
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet
Published Oct 25, 2007
6.8
MEDIUMCVSS 2.0
EPSS 4.26%
Description
Affected products
Remediation
Metrics
References (2)
Change history (0)
No recorded changes yet.