CVE-2003-0896: High severity Sun Java Runtime Environment (JRE) vulnerability
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.103 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0896?
CVE-2003-0896 is considered a critical severity vulnerability as it allows remote attackers to bypass security restrictions and execute arbitrary code.
How do I fix CVE-2003-0896?
To fix CVE-2003-0896, upgrade your Java Runtime Environment to a version later than 1.4.1_03 that addresses this vulnerability.
What kinds of software are affected by CVE-2003-0896?
CVE-2003-0896 affects Sun JRE versions up to and including 1.4.1_03.
What type of attacks can exploit CVE-2003-0896?
CVE-2003-0896 can be exploited by remote attackers to execute arbitrary code within the Java Virtual Machine.
Is CVE-2003-0896 still a concern today?
CVE-2003-0896 is an older vulnerability, but organizations using affected versions of Java should still be aware of potential exploitation risks.