First published: Thu Nov 14 2002(Updated: )
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Java Virtual Machine | =1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1295 has a high severity rating due to its potential to cause denial of service and unauthorized activity.
To mitigate CVE-2002-1295, you should update or disable the vulnerable version of Microsoft Java Virtual Machine.
CVE-2002-1295 allows for denial of service attacks and potentially other unauthorized activities through manipulated applet tags.
CVE-2002-1295 affects Microsoft Java Virtual Machine version 1.1.
Yes, CVE-2002-1295 can be exploited remotely by attacking the Internet Explorer browser using specially crafted HTML applet tags.