CVE-2003-0896 : The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtu

The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.

Published 2003-11-17 05:00:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2003-0896

SUN » JRE » Update Update3
Versions up to, including, (<=) 1.4.1
cpe:2.3:a:sun:jre:*:update3:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2003-0896

EPSS FAQ

26.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 96 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2003-0896

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2003-0896

Jump to

Vulnerability Details : CVE-2003-0896

Products affected by CVE-2003-0896

Exploit prediction scoring system (EPSS) score for CVE-2003-0896

CVSS scores for CVE-2003-0896

References for CVE-2003-0896