CVE-2003-1521

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16

Description

Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.

Affected products

Sun Java Plug-In: 1.4, 1.4.2, 1.4.2_01, 1.4.2_02

References

http://www.securityfocus.com/archive/1/341943
http://www.securityfocus.com/bid/8867
http://www.securityfocus.com/archive/1/341943
http://www.securityfocus.com/bid/8867

Get alerted when CVE-2003-1521 or the next vulnerability affects your stack