« Volver al listado

CVE-2003-1301

Estado: ModificadaMedia (5)—

Sun Java Runtime Environment (JRE) 1.x anterior a 1.4.2_11 y 1.5.x anterior a 1.5.0_06, y tal como se utiliza en varios navegadores web, permite a atacantes remotos provocar una denegación de servicio (cierre inesperado de la aplicación) mediante arrays de objetos profundamente anidados, que no son gestionados correctamente por el recolector de basura y provocan accesos inválidos a la memoria.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SUN — JRE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-1301",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.illegalaccess.org/exploit/ObjectStackOverflow.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/434705/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/18058",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.illegalaccess.org/exploit/ObjectStackOverflow.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/434705/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/18058",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses."
    }
  ],
  "lastModified": "2026-06-16T22:03:53.517",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63978872-E797-4F13-B0F9-98CB67D0962A"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EEAB662-644A-4D7B-8237-64142CF48724"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9598A49-95F2-42DB-B92C-CD026F739B83"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BED1009E-AE60-43A0-A0F5-38526EFCF423"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D011585C-0E62-4233-85FA-F29A07D68DA7"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE28C283-447A-4F83-B96B-69F96E663C1C"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D102063B-2434-4141-98E7-2DE501AE1728"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44051CFE-D15D-4416-A123-F3E49C67A9E7"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F296ACF3-1373-429D-B991-8B5BA704A7EF"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B863420B-DE16-416A-9640-1A1340A9B855"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}