Vulnerability Details CVE-2004-2627
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.111
EPSS Ranking 93.1%
CVSS Severity
CVSS v2 Score 10.0
References
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0231.html
- http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0884.html
- http://secunia.com/advisories/12945
- http://securitytracker.com/id?1011898
- http://www.osvdb.org/11041
- http://www.theregister.co.uk/2004/10/22/mobile_java_peril/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17825
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0231.html
- http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0884.html
- http://secunia.com/advisories/12945
- http://securitytracker.com/id?1011898
- http://www.osvdb.org/11041
- http://www.theregister.co.uk/2004/10/22/mobile_java_peril/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17825