CVE-2003-0896 in JVM
요약 (영어)
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager s checkPackageAccess method.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
예약하다
2003. 10. 24.
공개
2003. 11. 17.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 21003 | Sun JVM/SDK loadClass 메모리 손상 | 119 | 개념 증명 | 정의되지 않음 | CVE-2003-0896 |