CVE-2003-1516

Currently unrated

Key Information:

Vendor
Oracle
Status
Java Plug-in
Vendor
CVE Published:
31 December 2003

Summary

The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.

References

http://www.securityfocus.com/archive/1/341815
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/8857
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.