Vulnerability Details CVE-2003-1572
Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.9%
CVSS Severity
CVSS v2 Score 9.3
References
- http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html
- http://securitytracker.com/id?1006777
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760
- http://www.illegalaccess.org/java/jmf.php
- http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html
- http://securitytracker.com/id?1006777
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760
- http://www.illegalaccess.org/java/jmf.php