CVE-2002-0076

published 2002-03-19

CVE-2002-0076: Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal…

Priority P4 33 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
hp	java_jre-jdk	—	—
hp	java_jre-jdk	—	—
hp	java_jre-jdk	—	—
microsoft	virtual_machine	—	—
sun	jdk	—	—
sun	jre	—	—
sun	jre	—	—
sun	jre	—	—
sun	jre	—	—
sun	sdk	—	—
sun	sdk	—	—
sun	sdk	—	—
sun	sdk	—	—
sun	sdk	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.