CVE-2004-1503: Sun JRE

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.

Affected products

• Sun JRE: version 1.4.2 only; version 1.5.0 only

Published 2004-12-31. Last modified 2026-06-16.