{"id":"CVE-2004-1145","aliases":["EUVD-2004-1143","GHSA-95hh-399q-cvw3","RHSA-2005:065"],"status":"published","title":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted...","description":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0413,"percentile":0.90895,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-12-15T05:00:00Z","modified":"2026-06-26T10:02:09Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-3.3"}]}],"bundled":2}],"products":[{"vendor":"altlinux","product":"alt_linux"},{"vendor":"conectiva","product":"linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"ethereal_group","product":"ethereal"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"linux_advanced_workstation"},{"vendor":"sgi","product":"propack"},{"vendor":"suse","product":"suse_linux"}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2005-065.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=110356286722875\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18596","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.heise.de/security/dienste/browsercheck/tests/java.shtml","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13586","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:154","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"]},{"url":"http://www.kde.org/info/security/advisory-20041220-1.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/420222","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1145","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-95hh-399q-cvw3"},{"url":"https://access.redhat.com/errata/RHSA-2005:065","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.kde.org/info/security/advisory-20050101-1.txt","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=145938","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_065.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617380","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1145","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1165","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2004-1145","description":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2024-08-08T00:39:00.876Z","updated_at":"2026-11-02T14:34:54.063504Z"}],"euvd":[{"id":"EUVD-2004-1143","description":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2024-08-08T00:39:00Z","updated_at":"2026-11-03T01:15:16.148157Z"}],"ghsa":[{"id":"GHSA-95hh-399q-cvw3","title":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted...","description":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.","status":"published","published":"2022-04-29T02:59:02Z","modified":"2023-01-30T05:03:21Z","updated_at":"2026-11-02T14:46:49.034004Z"}],"nvd":[{"id":"CVE-2004-1145","description":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.","status":"published","published":"2004-12-15T05:00:00Z","modified":"2026-06-16T22:07:07.877Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}],"osv":[{"id":"RHSA-2005:065","title":"Red Hat Security Advisory: kdelibs security update","status":"published","published":"2024-09-15T15:07:47Z","modified":"2026-06-26T10:02:09Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}