CVE-2003-1572: Sun Jmf

High severity, CVSS 9.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.

Affected products

• Sun Jmf: version 2.1.1 only; version 2.1.1a only; version 2.1.1b only; version 2.1.1c only

Published 2009-06-01. Last modified 2026-06-16.