Lucene search

MitreCVE-2003-1134

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2003-1134

2005-05-1004:00:00

mitre

web.nvd.nist.gov

cve-2003-1134

sun java

jvm crash

local users

nvd

security vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

Percentile

0.4%

JSON

Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception.

Affected configurations

Nvd

Node

sunjavaMatch1.3.1

sunjavaMatch1.4.1

sunjavaMatch1.4.2

VendorProductVersionCPE
sunjava1.3.1cpe:2.3:a:sun:java:1.3.1:*:*:*:*:*:*:*
sunjava1.4.1cpe:2.3:a:sun:java:1.4.1:*:*:*:*:*:*:*
sunjava1.4.2cpe:2.3:a:sun:java:1.4.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	java	1.3.1	cpe:2.3:a:sun:java:1.3.1:::::::*
sun	java	1.4.1	cpe:2.3:a:sun:java:1.4.1:::::::*
sun	java	1.4.2	cpe:2.3:a:sun:java:1.4.2:::::::*

References

lists.grok.org.uk/pipermail/full-disclosure/2003-October/012773.html

www.securityfocus.com/bid/8892

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2003-1134