CVE-2002-1295
Microsoft Java Virtual Machine - Denial of Service via Applet Tag Class Name Bypass
Title source: llmDescription
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/6136
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
Mailing List mailing-list
x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=103684360031565&w=2
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10588.php
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103682630823080&w=2
Scores
EPSS
0.1544
EPSS Percentile
96.5%
Details
Status
published
Products (1)
microsoft/java_virtual_machine
1.1
Published
Nov 29, 2002
Tracked Since
Feb 18, 2026