CVE

Id
7720  
CVE No.
CVE-2003-0896  
Status
Candidate  
Description
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager"s checkPackageAccess method.  
Phase
Assigned (20031024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
45634 7720 CVE-2003-0896 BUGTRAQ:20021023 [LSD] Security vulnerability in SUN"s Java Virtual Machine implementation  View
45635 7720 CVE-2003-0896 URL:http://marc.info/?l=bugtraq&m=106692334503819&w=2  View
45636 7720 CVE-2003-0896 BUGTRAQ:20031027 Re: [LSD] Security vulnerability in SUN"s Java Virtual Machine implementation  View
45637 7720 CVE-2003-0896 URL:http://www.securityfocus.com/archive/1/342580  View
45638 7720 CVE-2003-0896 BUGTRAQ:20031027 Re: [LSD] Security vulnerability in SUN"s Java Virtual Machineimplementation  View
45639 7720 CVE-2003-0896 URL:http://www.securityfocus.com/archive/1/342583  View
45640 7720 CVE-2003-0896 MISC:http://lsd-pl.net/code/JVM/jre.tar.gz  View
45641 7720 CVE-2003-0896 HP:HPSBUX0311-295  View
45642 7720 CVE-2003-0896 URL:http://www.securityfocus.com/advisories/6028  View
45643 7720 CVE-2003-0896 SUNALERT:57221  View
45644 7720 CVE-2003-0896 URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57221  View
45645 7720 CVE-2003-0896 SUNALERT:200356  View
45646 7720 CVE-2003-0896 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200356-1  View
45647 7720 CVE-2003-0896 BID:8879  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63593 JVNDB-2003-000319 Microsoft Windows の ComCtl32.dll における任意のコードを実行される脆弱性 Microsoft Windows に含まれている Windows Common Controls (ComCtl32.dll) には、 Win32 messaging system を介して受信したメッセージに対するチェックが不適切であるため、任意のコードを実行される脆弱性が存在します。 CVE-2003-0897 7720 4.6 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000319.html  View