« Back to list

CVE-2003-1572

Status: ModifiedHigh (9.3)—

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

SUN — JMF

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2003-1572",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-06-01T22:30:00.187",
  "references": [
    {
      "url": "http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1006777",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.illegalaccess.org/java/jmf.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1006777",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.illegalaccess.org/java/jmf.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields."
    },
    {
      "lang": "es",
      "value": "Sun Java Media Framework (JMF) v2.1.1 a la 2.1.1c, permite a applets sin firmar provocar una denegación de servicio (caída de JVM) así como la lectura o lectura no autorizada de regiones de memoria a través de la clase ReadEnv, como se ha demostrado mediante la lectura de las variables de entorno empleando campos .data y .fields modificados."
    }
  ],
  "lastModified": "2026-06-16T22:04:40.930",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:jmf:2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C07F8DF0-43D5-49B5-B861-6859E0C6EBF1"
            },
            {
              "criteria": "cpe:2.3:a:sun:jmf:2.1.1a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E1EC62C8-4C42-4031-9163-BEC257D9D0E0"
            },
            {
              "criteria": "cpe:2.3:a:sun:jmf:2.1.1b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A0F37CA-0B0D-42E8-97F5-4314A7E84DBC"
            },
            {
              "criteria": "cpe:2.3:a:sun:jmf:2.1.1c:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D78D4E4-0230-4545-AC3E-445C26625998"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}