Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| J2se | Sun | 1.4.2 (including) | 1.4.2 (including) |
| J2se | Sun | 1.4.2_01 (including) | 1.4.2_01 (including) |
| J2se | Sun | 1.4.2_02 (including) | 1.4.2_02 (including) |
| J2se | Sun | 1.4.2_03 (including) | 1.4.2_03 (including) |
| J2se | Sun | 1.4.2_04 (including) | 1.4.2_04 (including) |
| J2se | Sun | 1.4.2_05 (including) | 1.4.2_05 (including) |
| J2se | Sun | 1.4.2_06 (including) | 1.4.2_06 (including) |