CVE-2002-1289
Microsoft Java Virtual Machine - Memory Corruption via INativeServices Class
Title source: llmDescription
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices (INativeServices) class, whose methods do not verify the memory addresses that are passed as parameters.
References (4)
Core 4
Core References
Mailing List mailing-list
x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=103684360031565&w=2
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10582.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/6140
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103682630823080&w=2
Scores
EPSS
0.1631
EPSS Percentile
96.6%
Details
Status
published
Products (1)
microsoft/java_virtual_machine
1.1
Published
Nov 29, 2002
Tracked Since
Feb 18, 2026