CVE-2002-2248

CWE-119 — Buffer Overflow3 documents3 sources
Severity
10.0CRITICAL
EPSS
4.9%
top 10.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netscape Communicator
Timeline
PublishedDec 31
Latest updateApr 30

Description

Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDnetscape/communicator14 versions+13

🔴Vulnerability Details

2
GHSA
GHSA-868j-8v9v-89vg: Buffer overflow in the sun↗2022-04-30
▶
CVEList
CVE-2002-2248: Buffer overflow in the sun↗2007-10-14
▶
CVE-2002-2248 (CRITICAL CVSS 10) | Buffer overflow in the sun.awt.wind | cvebase.io