CVE-2003-1572
Published Jun 1, 2009
Last updated 15 years ago
Overview
- Description
- Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:jmf:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C07F8DF0-43D5-49B5-B861-6859E0C6EBF1"
},
{
"criteria": "cpe:2.3:a:sun:jmf:2.1.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1EC62C8-4C42-4031-9163-BEC257D9D0E0"
},
{
"criteria": "cpe:2.3:a:sun:jmf:2.1.1b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A0F37CA-0B0D-42E8-97F5-4314A7E84DBC"
},
{
"criteria": "cpe:2.3:a:sun:jmf:2.1.1c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D78D4E4-0230-4545-AC3E-445C26625998"
}
],
"operator": "OR"
}
]
}
]