CVE-2003-1301

CVE-2003-1301 describes a denial-of-service vulnerability affecting Sun Java Runtime Environment (JRE) versions 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, as well as web browsers utilizing these JRE versions. Remote attackers can trigger an application crash by providing deeply nested object arrays, which cause improper garbage collection and invalid memory access. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for a low-complexity attack over the network with no authentication required, resulting in a partial availability impact. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness among security researchers.