Lucene search

K
nvd[email protected]NVD:CVE-2003-1572
HistoryJun 01, 2009 - 10:30 p.m.

CVE-2003-1572

2009-06-0122:30:00
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.1%

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.

Affected configurations

NVD
Node
sunjmfMatch2.1.1
OR
sunjmfMatch2.1.1a
OR
sunjmfMatch2.1.1b
OR
sunjmfMatch2.1.1c

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.1%

Related for NVD:CVE-2003-1572