CVE-2002-1292
First published: Thu Nov 14 2002(Updated: )
The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Java Virtual Machine | =1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.kb.cert.org/vuls/id/237777
- http://www.securityfocus.com/bid/6133
- http://marc.info/?l=bugtraq&m=103682630823080&w=2
- http://marc.info/?l=ntbugtraq&m=103684360031565&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10585
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
Frequently Asked Questions
What is the severity of CVE-2002-1292?
CVE-2002-1292 has been classified as a moderate risk vulnerability.
How do I fix CVE-2002-1292?
To fix CVE-2002-1292, it is recommended to upgrade to a later version of the Microsoft Java virtual machine that is not affected.
Which software is affected by CVE-2002-1292?
CVE-2002-1292 affects Microsoft Java virtual machine build 5.0.3805 and earlier, particularly when used in Internet Explorer.
What is the impact of CVE-2002-1292?
The impact of CVE-2002-1292 includes the potential for remote attackers to bypass security restrictions imposed by the Standard Security Manager.
Can CVE-2002-1292 be exploited remotely?
Yes, CVE-2002-1292 can be exploited remotely by attackers to modify security settings.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/microsoft
- product/java virtual machine
- canonical/microsoft java virtual machine
- agent/softwarecombine
- agent/tags
- canonical/oracle java virtual machine
- version/oracle java virtual machine/1.1