ByteOS Network

NVD Vulnerability Details :

CVE-2003-1572

Modified

Source-cve@mitre.org

Published At-01 Jun, 2009 | 22:30

Updated At-23 Apr, 2026 | 00:35

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Sun Microsystems (Oracle Corporation)

>>jmf>>2.1.1

cpe:2.3:a:sun:jmf:2.1.1:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jmf>>2.1.1a

cpe:2.3:a:sun:jmf:2.1.1a:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jmf>>2.1.1b

cpe:2.3:a:sun:jmf:2.1.1b:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jmf>>2.1.1c

cpe:2.3:a:sun:jmf:2.1.1c:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html	cve@mitre.org	N/A
http://securitytracker.com/id?1006777	cve@mitre.org	N/A
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760	cve@mitre.org	N/A
http://www.illegalaccess.org/java/jmf.php	cve@mitre.org	N/A
http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1006777	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.illegalaccess.org/java/jmf.php	af854a3a-2127-422b-91ae-364da2661108	N/A