CVE-2002-0076: High severity HP Java Jre-jdk vulnerability
Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0076?
CVE-2002-0076 is considered a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2002-0076?
To fix CVE-2002-0076, users should upgrade to a patched version of the Java Runtime Environment.
What systems are affected by CVE-2002-0076?
CVE-2002-0076 affects various versions of the Java Runtime Environment, including versions 1.1.8 and 1.3.x provided by Sun and HP.
Can CVE-2002-0076 be exploited remotely?
Yes, CVE-2002-0076 can be exploited remotely through malicious Java applets.
Is CVE-2002-0076 still a threat today?
While CVE-2002-0076 primarily affects legacy systems, it remains a potential threat if outdated software is still in use.