CVE-2002-0076

Java Runtime Environment - Remote Code Execution via Illegal Cast Operation

Title source: llm
STIX 2.1

Description

Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.

References (4)

Core 4
Core References
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/8480.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4313
Vendor Advisory vendor-advisory x_refsource_sun
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/218

Scores

EPSS 0.0107
EPSS Percentile 78.0%

Details

Status published
Products (14)
hp/java_jre-jdk 1.1.8
hp/java_jre-jdk 1.2.2
hp/java_jre-jdk 1.3
microsoft/virtual_machine 3802
sun/jdk 1.1.8 update14 (2 CPE variants)
sun/jre 1.1.8 update14 (2 CPE variants)
sun/jre 1.2.2 update10
sun/jre 1.3.0 update5
sun/jre 1.3.1 update1 (2 CPE variants)
sun/sdk 1.2.2_10
... and 4 more
Published Mar 19, 2002
Tracked Since Feb 18, 2026