CVE-2003-1572

2022-10-0316:15:42

mitre

www.cve.org

jmf 2.1.1c

unsigned applets

denial of service

readenv class

unauthorized memory locations

environment variables

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.1%

JSON

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.