Lucene search

MitreCVE-2002-1295

HistoryNov 29, 2002 - 5:00 a.m.

CVE-2002-1295

2002-11-2905:00:00

mitre

web.nvd.nist.gov

cve-2002-1295

denial of service

remote attack

unauthorized activities

html

java class restrictions

incomplete java object instantiation

vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka “Incomplete Java Object Instantiation Vulnerability.”

Affected configurations

Nvd

Node

microsoftjava_virtual_machineMatch1.1

VendorProductVersionCPE
microsoftjava_virtual_machine1.1cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	java_virtual_machine	1.1	cpe:2.3:a:microsoft:java_virtual_machine:1.1:::::::*

References

marc.info/?l=bugtraq&m=103682630823080&w=2

marc.info/?l=ntbugtraq&m=103684360031565&w=2

www.iss.net/security_center/static/10588.php

www.securityfocus.com/bid/6136

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

Related for CVE-2002-1295