CVE-2003-1301

Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*
cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*

History

20 Nov 2024, 23:46

Type Values Removed Values Added
References () http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719 - () http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719 -
References () http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300 - () http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300 -
References () http://www.illegalaccess.org/exploit/ObjectStackOverflow.html - Exploit () http://www.illegalaccess.org/exploit/ObjectStackOverflow.html - Exploit
References () http://www.securityfocus.com/archive/1/434705/100/0/threaded - () http://www.securityfocus.com/archive/1/434705/100/0/threaded -
References () http://www.securityfocus.com/bid/18058 - () http://www.securityfocus.com/bid/18058 -

Information

Published : 2003-12-31 05:00

Updated : 2024-11-20 23:46


NVD link : CVE-2003-1301

Mitre link : CVE-2003-1301

CVE.ORG link : CVE-2003-1301


JSON object : View

Products Affected

sun

  • jre