Unscored severity · published Dec 31, 2003
CVE-2003-1521
Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JP
Java Plug-in · Sun
1.4; 1.4.2; 1.4.2_01; 1.4.2_02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1521
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1521
Exploit
http://www.securityfocus.com/archive/1/341943
Exploit
http://www.securityfocus.com/bid/8867
More from Java Plug-in
–
CVE-2005-4845
The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer…
–
CVE-2003-1516
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and…
–
CVE-2001-1008
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that…