CVE-2003-1516

Java Plug-in 1.4.2_01 - Info Disclosure

Title source: llm

Description

The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Marc Schoenefeld · textremotewindows

https://www.exploit-db.com/exploits/23265

View Code ZIP pw:eip

References (2)

Core 2

Core References

Exploit mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/341815

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/8857

Scores

EPSS 0.0311

EPSS Percentile 86.9%

Details

Status published

Products (1)

sun/java_plug-in 1.4.2_01

Published Dec 31, 2003

Tracked Since Feb 18, 2026