PT-2003-2246 · Sun · Sun Java Runtime Environment

Publicado 2003-12-31 · Atualizado 2018-10-30 · CVE-2003-1301

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Java Runtime Environment (JRE) versions 1.x before 1.4.2 11 Sun Java Runtime Environment (JRE) versions 1.5.x before 1.5.0 06

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by utilizing deeply nested object arrays. These arrays are not properly handled by the garbage collector, leading to invalid memory accesses.

Recommendations For Sun Java Runtime Environment (JRE) versions 1.x before 1.4.2 11, update to version 1.4.2 11 or later to resolve the issue. For Sun Java Runtime Environment (JRE) versions 1.5.x before 1.5.0 06, update to version 1.5.0 06 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-1301

Produtos afetados

Sun Java Runtime Environment

Referências · 7

• 🔥 http://illegalaccess.org/exploit/ObjectStackOverflow.html · Exploit
• http://securityfocus.com/archive/1/434705/100/0/threaded · Nota
• http://securityfocus.com/bid/18058 · Nota
• http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1301 · Nota de Segurança
• http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1301 · Nota