CVE-2004-2627
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to...
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
Exploit likelihood
What each source reports
NVD Score used
10.0
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
- Record
CVE-2004-2627- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
- Record
CVE-2004-2627- Updated
- 2026-11-02
EUVDEUVD-2004-2618 No score
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
- Record
EUVD-2004-2618- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g4c4-m88p-5c36 No score
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to...
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
- Record
GHSA-g4c4-m88p-5c36- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2627 is a high vulnerability (CVSS 10.0), published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.27%, the 93rd percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/fulldisclosure/2004-10/0884.html
osvdb.org/11041
theregister.co.uk/2004/10/22/mobile_java_peril
archives.neohapsis.com/archives/bugtraq/2004-10/0231.html
exchange.xforce.ibmcloud.com/vulnerabilities/17825
securitytracker.com/id?1011898
secunia.com/advisories/12945
nvd.nist.gov/vuln/detail/CVE-2004-2627
github.com/advisories/GHSA-g4c4-m88p-5c36