Vulnerability in Sun Java Plug-In

CVE-2003-1521

Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.

EPSS: 0.058 (92.4th percentile) — read the EPSS interpretation.

Affected products

Sun Java_plug-in — versions 1.4, 1.4.2, 1.4.2_01
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)