CVE-2003-1123: High severity Java Development Kit (JDK) vulnerability

Published Dec 31, 2003
·
Updated

Sun Java Runtime Environment (JRE) and SDK 1.4.001 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.

Affected Software

60 affected components
Java Development Kit (JDK)=1.2.2_10
Java Development Kit (JDK)=1.2.2_10
Sun Java Runtime Environment (JRE)=1.3.1_03
Sun Java Runtime Environment (JRE)=1.4.0_01
Sun Java Runtime Environment (JRE)=1.2.2_011
Sun Java Runtime Environment (JRE)=1.4.0_01
Java Development Kit (JDK)=1.3.1_01
Java Development Kit (JDK)=1.3.0_05
Java Development Kit (JDK)=1.3.0_02
Java Development Kit (JDK)=1.2.2_11
Java Development Kit (JDK)=1.2.2_11
Java Development Kit (JDK)=1.4.0_01
Sun Java Runtime Environment (JRE)=1.3.0
Sun Java Runtime Environment (JRE)=1.3.1-update1
Sun Java Runtime Environment (JRE)=1.3.1_03
Java Development Kit (JDK)=1.3.1_03
Java Development Kit (JDK)=1.4
Sun Java Runtime Environment (JRE)=1.2.2_011
Sun Java Runtime Environment (JRE)=1.3.1-update1
Sun Java Runtime Environment (JRE)=1.3.1-update4
Sun Java Runtime Environment (JRE)=1.4
Sun Java Runtime Environment (JRE)=1.4
Java Development Kit (JDK)=1.3.1_03
Java Development Kit (JDK)=1.3.1_03
Sun Java Runtime Environment (JRE)=1.2.2
Sun Java Runtime Environment (JRE)=1.3.0-update5
Sun Java Runtime Environment (JRE)=1.3.1-update4
Java Development Kit (JDK)=1.2.2_10
Java Development Kit (JDK)=1.3.0_05
Java Development Kit (JDK)=1.3.0_05
Java Development Kit (JDK)=1.3.1_04
Java Development Kit (JDK)=1.3
Sun Java Runtime Environment (JRE)=1.2.2-update10
Sun Java Runtime Environment (JRE)=1.2.2-update10
Java Development Kit (JDK)=1.2.2_11
Java Development Kit (JDK)=1.3.1_01
Java Development Kit (JDK)=1.4
Sun Java Runtime Environment (JRE)=1.2.2-update10
Sun Java Runtime Environment (JRE)=1.2.2_003
Sun Java Runtime Environment (JRE)=1.3.0-update2
Sun Java Runtime Environment (JRE)=1.3.0-update2
Sun Java Runtime Environment (JRE)=1.3.1-update1
Sun Java Runtime Environment (JRE)=1.3.0
Sun Java Runtime Environment (JRE)=1.3.0
Sun Java Runtime Environment (JRE)=1.3.0-update5
Sun Java Runtime Environment (JRE)=1.3.1
Java Development Kit (JDK)=1.2.2
Java Development Kit (JDK)=1.2.2_12
Java Development Kit (JDK)=1.3.0_02
Java Development Kit (JDK)=1.3.1_01a
Java Development Kit (JDK)=1.4
Sun Java Runtime Environment (JRE)=1.3.0-update2
Sun Java Runtime Environment (JRE)=1.3.0-update4
Java Development Kit (JDK)=1.3.0_02
Sun Java Runtime Environment (JRE)=1.2.2
Sun Java Runtime Environment (JRE)=1.2.2_011
Sun Java Runtime Environment (JRE)=1.2.2_012
Sun Java Runtime Environment (JRE)=1.3.0-update5
Sun Java Runtime Environment (JRE)=1.3.1_03
Sun Java Runtime Environment (JRE)=1.4

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-55100-1

Patch Available

http://www.kb.cert.org/vuls/id/393292

Patch Available

http://www.securityfocus.com/bid/7824

Event History

Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Mar 12, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2003-1123?

CVE-2003-1123 is classified as a high severity vulnerability due to its potential to bypass security restrictions.

2

How do I fix CVE-2003-1123?

To fix CVE-2003-1123, upgrade to a later version of the Sun Java Runtime Environment or SDK that addresses this vulnerability.

3

What are the affected versions in CVE-2003-1123?

Affected versions in CVE-2003-1123 include Sun Java Runtime Environment and SDK 1.4.0_01 and earlier.

4

Can CVE-2003-1123 be exploited remotely?

Yes, CVE-2003-1123 can be exploited remotely since untrusted applets may access data from trusted applets.

5

What types of software does CVE-2003-1123 impact?

CVE-2003-1123 impacts various versions of Sun JRE and JDK across different operating systems including Windows, Linux, and Solaris.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203