Lucene search
MitreCVE-2002-2248HistoryOct 14, 2007 - 8:00 p.m.
CVE-2002-2248
2007-10-1420:00:00
CWE-119
mitre
web.nvd.nist.gov
18
cve-2002-2248
buffer overflow
java
remote code execution
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.4
Confidence
High
EPSS
0.04
Percentile
92.1%
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
Affected configurations
Node
netscapecommunicatorMatch4.0
ORnetscapecommunicatorMatch4.5
ORnetscapecommunicatorMatch4.6
ORnetscapecommunicatorMatch4.7
ORnetscapecommunicatorMatch4.51
ORnetscapecommunicatorMatch4.61
ORnetscapecommunicatorMatch4.72
ORnetscapecommunicatorMatch4.73
ORnetscapecommunicatorMatch4.74
ORnetscapecommunicatorMatch4.75
ORnetscapecommunicatorMatch4.76
ORnetscapecommunicatorMatch4.77
ORnetscapecommunicatorMatch4.78
ORnetscapecommunicatorMatch4.79
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netscape | communicator | 4.0 | cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:* |
| netscape | communicator | 4.5 | cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:* |
| netscape | communicator | 4.6 | cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:* |
| netscape | communicator | 4.7 | cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:* |
| netscape | communicator | 4.51 | cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:* |
| netscape | communicator | 4.61 | cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:* |
| netscape | communicator | 4.72 | cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:* |
| netscape | communicator | 4.73 | cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:* |
| netscape | communicator | 4.74 | cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:* |
| netscape | communicator | 4.75 | cpe:2.3:a:netscape:communicator:4.75:*:*:*:*:*:*:* |
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.4
Confidence
High
EPSS
0.04
Percentile
92.1%
Related for CVE-2002-2248