Lucene search

[email protected]CVE-2003-1572

HistoryJun 01, 2009 - 10:30 p.m.

CVE-2003-1572

2009-06-0122:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2003-1572

jmf

sun java

media framework

denial of service

unauthorized memory access

6.8 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

29.6%

JSON

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.

CPENameOperatorVersion
sun:jmfsun jmfeq2.1.1b
sun:jmfsun jmfeq2.1.1
sun:jmfsun jmfeq2.1.1c
sun:jmfsun jmfeq2.1.1a

CPE	Name	Operator	Version
sun:jmf	sun jmf	eq	2.1.1b
sun:jmf	sun jmf	eq	2.1.1
sun:jmf	sun jmf	eq	2.1.1c
sun:jmf	sun jmf	eq	2.1.1a

References

archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html

securitytracker.com/id?1006777

sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760

www.illegalaccess.org/java/jmf.php

6.8 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

29.6%

JSON

Related for CVE-2003-1572

cvelist1 nessus1