CVE-2004-1503

JRE 1.4.2, 1.5.0 - Denial of Service via DNS Request Integer Overflow

Title source: llm

Description

Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.

References (4)

Core 4

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/13142

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=109994063331773&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/11619

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/17990

Scores

EPSS 0.0093

EPSS Percentile 76.3%

Details

Status published

Products (2)

sun/jre 1.4.2

sun/jre 1.5.0

Published Dec 31, 2004

Tracked Since Feb 18, 2026