CVE-2003-1301

Sun JRE 1.x < 1.4.2_11 and 1.5.x < 1.5.0_06 - Denial of Service via Deeply Nested Object Arrays

Title source: llm
STIX 2.1

Description

Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18058
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/434705/100/0/threaded

Scores

EPSS 0.0117
EPSS Percentile 78.9%

Details

Status published
Products (12)
sun/jre 1.4.2
sun/jre 1.4.2_1
sun/jre 1.4.2_2
sun/jre 1.4.2_3
sun/jre 1.4.2_4
sun/jre 1.4.2_5
sun/jre 1.4.2_6
sun/jre 1.4.2_7
sun/jre 1.4.2_8
sun/jre 1.4.2_9
... and 2 more
Published Dec 31, 2003
Tracked Since Feb 18, 2026