CVE-2002-1290

Microsoft Java Virtual Machine - Unauthenticated Clipboard Access via INativeServices Methods

Title source: llm
STIX 2.1

Description

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6132
Mailing List mailing-list x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=103684360031565&w=2
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10583.php
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103682630823080&w=2

Scores

EPSS 0.1433
EPSS Percentile 96.3%

Details

Status published
Products (1)
microsoft/java_virtual_machine 1.1
Published Nov 29, 2002
Tracked Since Feb 18, 2026