CVE-2001-1008: Sun Java Plug-In

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.

Affected products

  • Sun Java Plug-In: version 1.4 only
  • Sun JRE: version 1.3.0 only

Published 2001-08-31. Last modified 2026-06-16.