CVE-2003-1301 | BDVDB-2026-17130 Detail

Description#

Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.illegalaccess.org/exploit/ObjectStackOverflow.html
http://www.securityfocus.com/bid/18058
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300
http://www.securityfocus.com/archive/1/434705/100/0/threaded
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719

Exploit#

No public exploit known

History#

Version 12006-05-26Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.