CVE-2003-1521

Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-09-16

Affected products

• Java Plug-in (Sun)

References

• http://www.securityfocus.com/archive/1/341943
• http://www.securityfocus.com/bid/8867