medium6.8Public exploit code
CVE-2003-1516
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Jav…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sun Java Plugin 1.4.2 _01 - Cross-Site Applet Sandbox Security Model Violation2003-10-20 · remote · windows · Verified
Impact
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Java Plug-In | Version 1.4.2_01 |