CVE-2002-1295

3 documents3 sources
Severity
7.5HIGH
EPSS
3.1%
top 13.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Java Virtual Machine
Timeline
PublishedNov 29
Latest updateApr 30

Description

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xrw7-4wgq-5hg3: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct oth↗2022-04-30
▶
CVEList
CVE-2002-1295: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct oth↗2002-11-14
▶
CVE-2002-1295 (HIGH CVSS 7.5) | The Microsoft Java implementation | cvebase.io