CVE-2003-1521: Sun Java Plug-In

Medium severity, CVSS 6.4. EPSS: 5.8% chance of exploitation in the next 30 days.

Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.

Affected products

• Sun Java Plug-In: version 1.4 only; version 1.4.2 only; version 1.4.2_01 only; version 1.4.2_02 only

Published 2003-12-31. Last modified 2026-06-16.