CVE-2003-0896 in JVM
Summary
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager s checkPackageAccess method.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/24/2003
Disclosure
11/17/2003
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 21003 | Sun JVM/SDK loadClass memory corruption | 119 | Proof-of-Concept | Not defined | CVE-2003-0896 |