CVE-2004-1503: Integer Overflow
Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1503?
CVE-2004-1503 has a severity rating of medium due to its potential to cause denial of service.
How do I fix CVE-2004-1503?
To fix CVE-2004-1503, upgrade to a later version of the Java Runtime Environment that addresses this vulnerability.
Which versions of JRE are affected by CVE-2004-1503?
CVE-2004-1503 affects Java Runtime Environment versions 1.4.2 and 1.5.0.
What kind of attack does CVE-2004-1503 enable?
CVE-2004-1503 allows an attacker to launch a denial of service attack by sending a large number of DNS requests.
What are the consequences of exploiting CVE-2004-1503?
Exploitation of CVE-2004-1503 may lead to Java exceptions and failed DNS requests, disrupting normal operations.