| Package | Affected versions | Patched versions |
|---|---|---|
| java plug-in | = 1.4.2_01 |
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free