Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-1516. PoCs published by Marc Schoenefeld.
AI-analyzed exploit summary This exploit demonstrates a Java sandbox security model violation where applets from different domains can share read/write access to a static variable, allowing unsigned applets to access or modify data from signed applets. The PoC includes two applets (ReadApplet and WriteApplet) that manipulate the same static variable in the Xalan library.
Description
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.
Exploits (1)
This exploit demonstrates a Java sandbox security model violation where applets from different domains can share read/write access to a static variable, allowing unsigned applets to access or modify data from signed applets. The PoC includes two applets (ReadApplet and WriteApplet) that manipulate the same static variable in the Xalan library.