CVE-2003-1123

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16

Description

Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.

Affected products

Sun Jdk: 1.2.2, 1.2.2_10, 1.2.2_11, 1.2.2_12, 1.3, 1.3.0_02 (+7)
Sun Jre: 1.2.2, 1.2.2-update10, 1.2.2_003, 1.2.2_011, 1.2.2_012, 1.3.0 (+9)

References

http://secunia.com/advisories/8958
http://securitytracker.com/id?1006935
http://sunsolve.sun.com/search/document.do?assetkey=1-26-55100-1
http://www.kb.cert.org/vuls/id/393292
http://www.securityfocus.com/bid/7824
https://exchange.xforce.ibmcloud.com/vulnerabilities/12189
http://secunia.com/advisories/8958
http://securitytracker.com/id?1006935
http://sunsolve.sun.com/search/document.do?assetkey=1-26-55100-1
http://www.kb.cert.org/vuls/id/393292
http://www.securityfocus.com/bid/7824
https://exchange.xforce.ibmcloud.com/vulnerabilities/12189

Get alerted when CVE-2003-1123 or the next vulnerability affects your stack