CVE-2003-0896 in JVM

Resumen (Inglés)

The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager s checkPackageAccess method.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2003-10-24

Divulgación

2003-11-17

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
21003	Sun JVM/SDK loadClass desbordamiento de búfer	119	Prueba de concepto	No está definido	CVE-2003-0896

Fuentes

• MITRE
• NVD
• CVE Details