Vulnerability Details CVE-2003-1572
Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 74.6%
CVSS Severity
CVSS v2 Score 9.3
References
- http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html
- http://securitytracker.com/id?1006777
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760
- http://www.illegalaccess.org/java/jmf.php
- http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html
- http://securitytracker.com/id?1006777
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760
- http://www.illegalaccess.org/java/jmf.php