CVE-2002-1310: Buffer Overflow
Published Nov 21, 2002
·Updated
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.
Affected Software
1 affected component
Macromedia JRun<=4.0
Remediation
Event History
Nov 21, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1310?
CVE-2002-1310 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2002-1310?
To mitigate CVE-2002-1310, upgrade to a version of Macromedia JRun that is higher than 4.0.
3
Who is affected by CVE-2002-1310?
CVE-2002-1310 affects users of Macromedia JRun version 4.0 and earlier.
4
What type of attack does CVE-2002-1310 allow?
CVE-2002-1310 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
5
What is the nature of the vulnerability in CVE-2002-1310?
CVE-2002-1310 is a heap-based buffer overflow vulnerability in the error-handling mechanism of the IIS ISAPI handler.