CVE-2003-1123 Security feature bypass in n/a

High 7.5 Published 12 Mar 2005 Updated 8 Aug 2024

Untrusted Java applets can access trusted applet data, bypassing security restrictions and potentially exposing sensitive information.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2003-1123?

CVE-2003-1123 is a high-severity vulnerability in Sun Jdk, published on 12 Mar 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.

Which versions are affected by CVE-2003-1123?

It affects 2 products.

Products include Sun Jdk, Sun Jre.

How do I fix CVE-2003-1123?

No fix has been published for CVE-2003-1123 yet. Limit exposure of the affected software until one is available.

Is CVE-2003-1123 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-1123 exists.

Public exploit code: 1 Exploit-DB entry.

All Sun Jdk vulnerabilities

Sources

Also known as GHSA-wm8w-8q3h-xpmg.