CVE-2003-1572 Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstra...
HighCVSS 9.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jmf | = 2.1.1 | No fix listed |
| sun jmf | = 2.1.1a | No fix listed |
| sun jmf | = 2.1.1b | No fix listed |
| sun jmf | = 2.1.1c | No fix listed |
References
- 20030625 Privilege escalation applet, Java Media Framework mailing-list
- 1006777 vdb-entry
- 54760 vendor-advisory
- www.illegalaccess.org