CVE-2003-1123

Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.

Affected products

Sdk, Sun Java Runtime Environment

Sun Jdk

= 1.2.2, 1.2.2_10, 1.2.2_11, 1.2.2_12, 1.3, 1.3.0_02, 1.3.0_05, 1.3.1_01, 1.3.1_01a, 1.3.1_03, 1.3.1_04, 1.4, 1.4.0_01

Sun Jre

= 1.2.2, 1.2.2_003, 1.2.2_011, 1.2.2_012, 1.3.0, 1.3.1, 1.3.1_03, 1.4, 1.4.0_01

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

11.1% (96th percentile)

NVD status

Modified

Published

2005-03-12