First published: Thu Nov 14 2002(Updated: )
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Java Virtual Machine | =1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1290 has a moderate severity level due to the potential for unauthorized access to clipboard contents.
To fix CVE-2002-1290, ensure that the Microsoft Java Virtual Machine is updated to a secure version or disable the use of Java applets in Internet Explorer.
The main risks associated with CVE-2002-1290 include unauthorized access to sensitive data copied to the clipboard and potential data theft.
Users of the Microsoft Java Virtual Machine version 1.1 who use Internet Explorer are affected by CVE-2002-1290.
Yes, CVE-2002-1290 can be exploited remotely by attackers through malicious Java applets.