9.3
CVE-2003-1572
- EPSS 1.72%
- Veröffentlicht 01.06.2009 22:30:00
- Zuletzt bearbeitet 16.06.2026 22:04:40
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.72% | 0.745 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html
http://securitytracker.com/id?1006777
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760
http://www.illegalaccess.org/java/jmf.php