PT-2003-2466 · Sun+1 · Sun Java Plug-In+1

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1521

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun Java Plug-In versions 1.4 through 1.4.2 02

Description The issue allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, violating the Java security model.

Recommendations For Sun Java Plug-In versions 1.4 through 1.4.2 02, consider disabling the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2003-1521

Produtos afetados

Apache Crimson

Sun Java Plug-In

Referências · 4

• 🔥 https://exploit-db.com/exploits/23270 · Exploit
• 🔥 http://securityfocus.com/bid/8867 · Exploit
• 🔥 http://securityfocus.com/archive/1/341943 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1521 · Nota de Segurança