Unscored CVE-2001-1008 EUVD-2001-0989GHSA-hjg8-q4cj-f6qp

Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unaut…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.

References

3245 vdb-entry
javaplugin-jre-expired-certificate(7048) vdb-entry
20010824 Java Plugin 1.4 with JRE 1.3 -> Ignores certificates. mailing-list